Vulnerability Details CVE-2020-36082
File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 84.5%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2020-36082
-
cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1