CVE-2020-7672: Mosc Project Mosc

High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days.

mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed by the `eval` function, resulting in code execution.

Affected products

• Mosc Project Mosc: up to and including 1.0.0

Published 2020-06-10. Last modified 2026-06-17.