CVE-2020-7640: Pixlcore Pixl-Class

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization.

Affected products

• Pixlcore Pixl-Class: before 1.0.3 (fixed in 1.0.3)

Published 2020-04-27. Last modified 2026-06-17.