CVE-2020-35760: Bloofox Bloofoxcms

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files).

Affected products

• Bloofox Bloofoxcms: version 0.5.2.1 only

Published 2021-06-16. Last modified 2026-06-17.