CVE-2020-26670

HIGH 8.8CVE-2020-26670 · Published 01/06/2021 · updated 17/06/2026

In short

CVE-2020-26670 is a HIGH (CVSS 8.8) vulnerability affecting bigtree cms (bigtreecms).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bigtree cms bigtreecms	`≤ 4.4.10`	No fix yet

Description

A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands through a crafted request sent to the server via the 'Create a New Setting' function.

References

exploit-db.com/exploits/48831 · Exploit

More vulnerabilities in bigtree cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bigtree cms

bigtreecms

≤ 4.4.10

No fix yet

More vulnerabilities in bigtree cms

See all →