CVE-2020-36142: Bloofox Bloofoxcms

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter.

Affected products

• Bloofox Bloofoxcms: version 0.5.2.1 only

Published 2021-06-04. Last modified 2026-06-17.