CVE-2020-19248

5.1 mediumEPSS 0.3%

Medium (5.1) in pbootcms pbootcms. EPSS 0.3% chance of exploitation in the next 30 days.

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.

Severity

CVSS 3.1

5.1 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-02-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pbootcms:pbootcms

References

https://github.com/SticKManII/SticKManII.github.io/tree/master/2019/07/31/PbootCMSv1-4-1-%E5%89%8D%E5%8F%B0%E6%90%9C%E7%B4%A2%E9%A1%B5%E9%9D%A2%E6%A8%A1%E6%9D%BF%E6%B3%A8%E5%85%A5
https://unh3x.github.io/2019/07/19/PbootCMSv1.4.1_Template_Injection/

Check your stack JSON