critical9.8
CVE-2020-20979
An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code.
Impact
An arbitrary file upload vulnerability in the move_uploaded_file() function of LJCMS v4.3 allows attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 8cms | Ljcms | Version 4.3.- |