What is GHSA-xc7v-jvj9-p5fm?

GHSA-xc7v-jvj9-p5fm is a security advisory published by GitHub Security Advisories with High severity. A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow...

Which CVE IDs does GHSA-xc7v-jvj9-p5fm cover?

GHSA-xc7v-jvj9-p5fm covers the following CVE IDs: CVE-2022-26607. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xc7v-jvj9-p5fm?

GHSA-xc7v-jvj9-p5fm has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-xc7v-jvj9-p5fmHighCVSS 7.2

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow...

Vendor

GitHub Security Advisories

Published

April 7, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2022-26607 →

📋 Description

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-26607
https://github.com/baigoStudio/baigoCMS/issues/9
http://baigocms.com
https://github.com/baigoStudio/baigoCMS
https://github.com/advisories/GHSA-xc7v-jvj9-p5fm