CVE-2020-27191

PoC —

CVSS 3.1

7.5 high

EPSS

10%p95

Published

Nov 16, 2020 (Nov 16, 2020)

Modified

Jun 17, 2026

Description

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Vendors: lionwiki
Products: lionwiki
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (9.6%)

In the news0 stories

No ingested article mentions this CVE yet.