CVSS v3
7.2
HIGH
EPSS Score
41.2%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
Active exploitation of CVE-2020-25790 has not been confirmed. The EPSS score is 41.2%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2020-25790 has a CVSS v3 base score of 7.2 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).