CVE-2020-23691

2021-05-1415:15:07

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.

CPENameOperatorVersion
yfcmfeqV2.0.0
yfcmfeq2.3.1
yfcmfeqV1.2.0
yfcmfeq1.0.1
yfcmfeqV1.1.0
yfcmfeqV1.1.1

Name	Operator	Version
yfcmf	eq	V2.0.0
yfcmf	eq	2.3.1
yfcmf	eq	V1.2.0
yfcmf	eq	1.0.1
yfcmf	eq	V1.1.0
yfcmf	eq	V1.1.1

References

github.com/lxw1844912514/YFCMF/issues/1