CVE-2020-35657

PoC —

CVSS 3.1

7.2 high

EPSS

2%p83

Published

Dec 23, 2020 (Dec 23, 2020)

Modified

Jun 17, 2026

Description

Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.

Vendors: jaws project
Products: jaws
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.