AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-20628

HIGH · CVSS 7.5 EPSS 2.18%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-20628
Severity
HIGH
CVSS
7.5
EPSS
2.18%

Original Filing — NVD Description

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.