CVE-2020-19954

Published: 2021-10-14T15:15Z

Last Modified: 2024-11-21T05:09Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt