CVE-2020-23037: Portable Playable

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

Affected products

• Portable Playable: version 9.18 only

Published 2021-10-22. Last modified 2026-06-17.