Vulnerabilities (CVE)

Filtered by vendor Dext5 Subscribe
Filtered by product Dext5
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13894 1 Dext5 1 Dext5 2020-06-11 5.0 MEDIUM 7.5 HIGH
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.