CVE-2022-25578

CVE-2022-25578 is a critical code injection vulnerability affecting taocms v3.0.2, allowing unauthenticated attackers to arbitrarily edit the .htaccess file. With a CVSS score of 9.8, this flaw presents a severe risk due to its network-based attack vector, low complexity, and high potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability's high FAUCET Risk Score of 80/100 and EPSS percentile indicate a significant threat that warrants immediate attention. Despite the lack of community discussion or media coverage, the underlying CWE-94 weakness highlights a fundamental security flaw.