High severity7.2NVD Advisory· Published Dec 23, 2020· Updated Jun 17, 2026
CVE-2020-35657
CVE-2020-35657
Description
Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:jaws_project:jaws:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jaws_project:jaws:*:*:*:*:*:*:*:*range: <=1.8.0
- (no CPE)range: <=1.8.0
- Jaws/Jawsdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.