ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-35489”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-35489
Published
2020-12-17
CVSS:
10.0
ShadowTrackr CVSS:
8.2
Summary:
The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.