CVE-2020-21784: Phpwcms

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.

Affected products

• Phpwcms Phpwcms: version 1.9.13 only

Published 2021-06-24. Last modified 2026-06-17.