CVE-2022-35147

CRITICAL CVSS: 9.8 Published: 2022-08-17 Modified: 2026-06-17

Description

DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.

Html-Js Doracms

CWE-200