CVE-2020-20287
Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function’s improper judgment of the request parameters, triggers remote code execution.
Date published : 2021-02-01
https://blog.jiguang.xyz/posts/remote-code-execution-via-upload-image/