What’s Vulnerable › Vulnerabilities

CVE-2020-21554

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-25 · updated 2026-06-17

Description

A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.

Affected products

• Tinyrise Tinyshop: 3.1.1

References

• http://tinyrise.com/
• http://tinyrise.com/down.html
• https://imgur.com/dg1DM5T
• https://imgur.com/pA8OWxa
• http://tinyrise.com/
• http://tinyrise.com/down.html
• https://imgur.com/dg1DM5T
• https://imgur.com/pA8OWxa

Get alerted when CVE-2020-21554 or the next vulnerability affects your stack