CVE-2020-24981: Ucms Project Ucms

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.

Affected products

• Ucms Project Ucms: version 1.4.8 only

Published 2020-09-04. Last modified 2026-06-17.