CVE-2020-21356

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p58

Published

Aug 6, 2021 (Aug 6, 2021)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads.

Vendors: popojicms
Products: popojicms
Weakness: CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.