CVE-2020-10228: Vtenext

High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days.

A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.

Affected products

• Vtenext Vtenext: version 19 only

Published 2020-09-14. Last modified 2026-06-17.