TI-2020-14095 CVE-2020-21554 · GHSA-mp49-872p-4w68A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in…Priority LOW 38A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01525 · Published 2022-03-25 · No fix listed