CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload

published June 3, 2021

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Published
2021-06-03T13:54Z
EPSS history
Timeline
  • 03 JUN 13:54Z
    WellCMS 2.0 beta3 is vulnerable to File Upload
    cvelistv5