CVE-2016-20103 | Cherry Plugin up to 1.2.6 download-content.php readfile path traversal

October 20, 2026 Yanac

A vulnerability was found in Cherry Plugin up to 1.2.6. It has been rated as problematic. Affected by this issue is the function readfile of the file /admin/import-export/download-content.php. The manipulation of the argument File leads to path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2016-20103. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More