CVE-2020-21516

CRITICAL9.8EPSS 0.43%

FeehiCMS has an arbitrary file upload vulnerability

Published: 9/7/2022Modified: 11/8/2023
Also known as:GHSA-jj62-mc3m-j769

Description

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (5)