CVE-2020-25406: Lemocms

High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days.

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files.

Affected products

• Lemocms Lemocms: from 1.8.0, up to and including 1.8.7

Published 2020-11-18. Last modified 2026-06-17.