CVE-2018-20062
ThinkPHP "noneCms" Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
99.5%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
99.5%EPSS · 30 days99.5%
2026-06-302026-07-16
Product
ThinkPHP / noneCms
Vulnerability
ThinkPHP "noneCms" Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-20062
No related CVEs by CWE or product.