What is CVE-2022-47034?

CVE-2022-47034 is a critical-severity vulnerability in Playsms, classified under Incorrect Comparison. CVSS score: 9.8/10. Published 2023-02-13.

How severe is CVE-2022-47034?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Playsms

CVE-2022-47034

A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.

Published 2023-02-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.008 (57.4th percentile), scored 2026-10-31.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 57th percentile — 57.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Playsms

Weakness classification (CWE)

CWE-697 — Incorrect Comparison

References

github.com/playsms/playsms/commit/dd23673a00c052e113c6d44eb629dc355d3c0605 (Patch)
gist.github.com/tonino-25/d2316094cc751cc7a8e2c1ae6dbecfe9 (Third Party Advisory)

Frequently asked questions

What is CVE-2022-47034?: CVE-2022-47034 is a critical-severity vulnerability in Playsms, classified under Incorrect Comparison. CVSS score: 9.8/10. Published 2023-02-13.
How severe is CVE-2022-47034?: Critical severity. CVSS v3 base score is 9.8 out of 10.