CVE-2020-12853: Pydio Cells

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTML and JavaScript code to personal folders or accessible cells.

Affected products

• Pydio Cells: version 2.0.4 only

Published 2020-06-04. Last modified 2026-06-17.