High severity7.2NVD Advisory· Published Sep 13, 2020· Updated Jun 17, 2026
CVE-2020-25287
CVE-2020-25287
Description
Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admin_editor.php the_file=..%2Findex.php&open=Open request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pligg_project:pligg:2.0.3:*:*:*:*:*:*:*
- Pligg/Pliggdescription
Patches
Vulnerability mechanics
References
1- github.com/jenaye/pligg/blob/master/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.