CVE-2020-28173: Simple College Project Simple College

High severity, CVSS 7.2. EPSS: 3.2% chance of exploitation in the next 30 days.

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.

Affected products

• Simple College Project Simple College: version 1.0 only

Published 2021-03-31. Last modified 2026-06-17.