CVE-2020-13241

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with…

published May 20, 2020

CVSS
—
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Published
2020-05-20T18:53Z
EPSS history
Timeline
  • 20 MAY 18:53Z
    Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with…
    cvelistv5