CVE-2020-36082

9.8 criticalEPSS 1.2%

Critical (9.8) in bloofox bloofoxcms. EPSS 1.2% chance of exploitation in the next 30 days.

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-08-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bloofox:bloofoxcms

References

https://github.com/alexlang24/bloofoxCMS/issues/7
https://github.com/alexlang24/bloofoxCMS/issues/7

Check your stack JSON