CVE-2020-25483: Ucms Project Ucms

Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days.

An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.

Affected products

• Ucms Project Ucms: version 1.4.8 only

Published 2020-10-23. Last modified 2026-06-17.