CVE-2020-19902 — Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter

Back Back to CVE browser

CRITICAL

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter

Published Jun 27, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.93%

Description

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.93% 0.01935

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.01935

Score over time

2023–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	1.93% (0.01935)	79.36th	v5 (v2026.06.15)
Jun 15, 2026	1.61% (0.01613)	72.74th	v5 (v2026.06.15)
Mar 30, 2025	4.55% (0.04553)	88.15th	v4 (v2025.03.14)
Mar 29, 2025	9.47% (0.09466)	87.92th	v4 (v2025.03.14)
Mar 17, 2025	4.55% (0.04553)	88.45th	v4 (v2025.03.14)
Dec 12, 2024	0.57% (0.00568)	78.56th	v3 (v2023.03.01)
Jul 3, 2024	0.55% (0.00548)	77.59th	v3 (v2023.03.01)
May 27, 2024	0.33% (0.00331)	71.04th	v3 (v2023.03.01)
May 3, 2024	0.30% (0.00299)	69.29th	v3 (v2023.03.01)
Feb 8, 2024	0.27% (0.00265)	65.23th	v3 (v2023.03.01)
Jul 7, 2023	0.27% (0.00265)	62.99th	v3 (v2023.03.01)
Jun 28, 2023	0.06% (0.00055)	20.64th	v3 (v2023.03.01)