Security Advisory
CVE-2020-23037
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.