CVE-2020-25790

Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive

published September 19, 2020

CVSS
—
EPSS
16%
Percentile
96.8
In the wild
Unconfirmed
What it is

Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15578 · 96.8th percentile
Published
2020-09-19T20:31Z
EPSS history
Timeline
  • 19 SEP 20:31Z
    Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive
    cvelistv5