CVE-2020-20975: Gxlcms

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.

Affected products

• Gxlcms Gxlcms: version 1.1 only

Published 2021-08-12. Last modified 2026-06-17.