CVE-2020-11546

9.8 criticalEPSS 33%

Critical (9.8) in superwebmailer superwebmailer. EPSS 33% chance of exploitation in the next 30 days.

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2020-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

superwebmailer:superwebmailer

References

https://blog.to.com/advisory-superwebmailer-cve-2020-11546/
https://blog.to.com/advisory-superwebmailer-cve-2020-11546/

Check your stack JSON