TI-2020-15864 CVE-2020-25881 · GHSA-9rwq-2qv8-4jpvA vulnerability was discovered in the filename parameter in…Priority LOW 27A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS.CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01222 · Published 2021-10-29 · No fix listed CWE-22