CVE-2020-21516: Malicious File Upload
Published Sep 6, 2022
·Updated
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.
Affected Software
1 affected component
Feehi Feehicms=2.0.8
Remediation
Patch Available
Event History
Sep 6, 2022
CVE Published
via MITRE·06:08 PM
Data Sourced
via MITRE·06:08 PM
Description
Frequently Asked Questions
1
What is CVE-2020-21516?
CVE-2020-21516 is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, allowing attackers to execute PHP code.
2
What is the severity of CVE-2020-21516?
The severity of CVE-2020-21516 is critical with a CVSS score of 9.8.
3
How can an attacker exploit CVE-2020-21516?
An attacker can exploit CVE-2020-21516 by uploading malicious files through the head image upload feature.
4
What is the affected software version for CVE-2020-21516?
The affected software version for CVE-2020-21516 is FeehiCMS 2.0.8.
5
Is there a fix available for CVE-2020-21516?
Yes, a fix for CVE-2020-21516 is available. It is recommended to update FeehiCMS to a version that addresses the vulnerability.