CVE-2020-24136

Publication date

2021-04-07 15:00:10

Family

mitre

State

PUBLISHED

Description

Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php.