CVE-2020-19902

2023-06-2700:00:00

mitre

www.cve.org

cve-2020-19902

remote attack

arbitrary code execution

wex/cssjs.php parameter

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter.

References

github.com/vedees/wcms/issues/3