Description
An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.
Unscored
CVE-2020-21976
EUVD-2020-14742GHSA-pxpv-9jq7-3m5h
An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and exec…
Published Aug 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre