CVE-2022-45966

CVE-2022-45966 is a critical arbitrary file upload vulnerability found in the file management function module of Classcms version 3.5. This flaw allows an unauthenticated attacker to upload malicious files without restriction, leading to severe impacts on confidentiality, integrity, and availability. With a CVSS score of 9.8, exploitation is straightforward, requiring no user interaction or complex conditions. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is no evidence of active exploitation, the high risk score and ease of exploitation warrant immediate attention.