CVE-2022-36262
Critical · CVSS 9.8taocms — PHP Code Injection via config.php modification
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-94
Description
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Search profile — drives PoC discovery
Symbols config.phpwebsite settingstaocmstaogogo
Keywords CVE-2022-36262taocmstaocms 3.0.2code injectionconfig.phparbitrary php codewebsite settingsCWE-94taogogo
Versions: 3.0.2
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z