CVE-2020-20670

CVE-2020-20670 affects ZKEACMS V3.2.0, where an arbitrary file upload in /admin/media/upload can lead to code execution via a crafted HTML file. The connected documents confirm the vulnerable component and impact but do not provide a patch version or explicit remediation steps. Exploitation detai...