CVE-2020-21359

Publication date

2021-08-11 20:53:54

Family

mitre

State

PUBLISHED

Description

An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded files name.