CVE-2022-46890EPSS p45.6%
CVE-2022-46890CVE-2022-46890
nexusphp / nexusphp
Description
Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is caused by a lack of checks performed by the /forums.php?action=post page).
Scoring
| CVSS | 4.3 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| EPSS | 0.64% probability of exploitation · percentile 45.6% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-17 |