CVE-2020-7875: DEXT5 DEXT5UPLOAD

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

Affected products

• DEXT5 DEXT5UPLOAD: up to and including 5.0.0.117

Published 2021-10-28. Last modified 2026-06-17.