CVE-2020-23945: Victor CMS Project Victor CMS

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.

Affected products

• Victor CMS Project Victor CMS: version 1.0 only

Published 2020-10-27. Last modified 2026-06-17.