CVSS v3
7.5
HIGH
EPSS Score
77.0%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
Active exploitation of CVE-2020-23972 has not been confirmed. The EPSS score is 77.0%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2020-23972 has a CVSS v3 base score of 7.5 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).