CVE-2020-19625

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-03-26 · updated 2026-06-17

Description

Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter.

Affected products

Gridx Project Gridx: 1.3

References

http://mayoterry.com/file/cve/Remote_Code_Execution_Vulnerability_in_gridx_latest_version.pdf
https://github.com/oria/gridx/issues/433
http://mayoterry.com/file/cve/Remote_Code_Execution_Vulnerability_in_gridx_latest_version.pdf
https://github.com/oria/gridx/issues/433

Get alerted when CVE-2020-19625 or the next vulnerability affects your stack