CVE-2020-13795

Published June 3rd, 2020

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings.

NavigateCMS/Navigate-CMS

Navigate CMS, a very powerful open source content management system for everybody.

GitHub