CVE-2018-20526: Roxyfileman Roxy Fileman

Critical severity, CVSS 9.8. EPSS: 73.1% chance of exploitation in the next 30 days.

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

Affected products

• Roxyfileman Roxy Fileman: version 1.4.5 only

Published 2019-03-21. Last modified 2026-06-17.