CVE-2020-29279

Critical · 9.8

CVSS

9.8

EPSS

52.9%

Published

Dec 2, 2020

CISA due date

—

The record

PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed