CVE-2020-20698: S-CMS

High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days.

A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.

Affected products

• S-CMS S-CMS: version 3.0 only

Published 2021-07-30. Last modified 2026-06-17.