What is GHSA-979x-3p5w-qvgc?

GHSA-979x-3p5w-qvgc is a security advisory published by GitHub Security Advisories with High severity. vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual...

Which CVE IDs does GHSA-979x-3p5w-qvgc cover?

GHSA-979x-3p5w-qvgc covers the following CVE IDs: CVE-2020-26678. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-979x-3p5w-qvgc?

GHSA-979x-3p5w-qvgc has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-979x-3p5w-qvgcHighCVSS 8.8

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-26678 →

📋 Description

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-26678
https://api.vfairs.com/v1/profiles
https://www.huntress.com/blog/zero-day-vulnerabilities-in-popular-event-management-platforms-could-leave-msps-open-to-attack
http://vfairs.com
https://github.com/advisories/GHSA-979x-3p5w-qvgc