CVE-2020-24137

5.3 mediumEPSS 1.4%

Medium (5.3) in wcms wcms. EPSS 1.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wcms:wcms

References

https://github.com/secwx/research/blob/main/cve/CVE-2020-24137.md
https://github.com/vedees/wcms/issues/7
https://github.com/secwx/research/blob/main/cve/CVE-2020-24137.md
https://github.com/vedees/wcms/issues/7

Check your stack JSON