CVE-2020-18888

Name of the Vulnerable Software and Affected Versions: puppyCMS version 5.1

Description: The issue allows remote malicious attackers to delete files or folders. This is achieved via the /admin/functions.php API endpoint.

Recommendations: For puppyCMS version 5.1, as a temporary workaround, consider restricting access to the /admin/functions.php endpoint until a patch is available. Avoid using this endpoint for file or folder management until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.