{"action":"Upgrade feehi/cms to 2.0.8.1 or later.","affected":[{"fixed":"2.0.8.1","introduced":"0"}],"component":"feehi/cms","cve_ids":["CVE-2020-21516"],"ecosystem":"Packagist","epss":0.01246,"exploited":false,"fixed_versions":["2.0.8.1"],"ghsa_id":"GHSA-jj62-mc3m-j769","id":"tcs_01M5KF4MQAPQSR5K695YREAX5Z","modified_at":"2023-11-08T04:02:53.436675Z","published_at":"2022-09-07T00:01:50Z","references":["https://osv.dev/vulnerability/GHSA-jj62-mc3m-j769","https://nvd.nist.gov/vuln/detail/CVE-2020-21516","https://github.com/liufee/cms/issues/46","https://github.com/liufee/cms/commit/ecbfb0ca77874ead5b6e79b96a5e1f94e67475a9","https://github.com/liufee/cms","https://github.com/liufee/cms/releases/tag/2.0.8.1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jj62-mc3m-j769","url":"https://osv.dev/vulnerability/GHSA-jj62-mc3m-j769"}],"summary":"FeehiCMS has an arbitrary file upload vulnerability"}