CVE-2020-14042: Codiad

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's name $path variable in components/filemanager/class.filemanager.php. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."

Affected products

• Codiad Codiad: from 1.7.8

Published 2020-08-25. Last modified 2026-06-17.