Medium severity6.1NVD Advisory· Published Jun 4, 2020· Updated Jun 17, 2026

CVE-2020-12853

Description

Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTML and JavaScript code to personal folders or accessible cells.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pydio/Cells
cpe:2.3:a:pydio:cells:2.0.4:*:*:*:*:*:*:*
Pydio/Cellsdescription
Pydio/Pydiollm-fuzzy
Range: =2.0.4

Patches

Vulnerability mechanics

References

www.coresecurity.com/core-labs/advisories/pydio-cells-204-multiple-vulnerabilitiesnvdExploitThird Party Advisory
packetstormsecurity.com/files/158002/Pydio-Cells-2.0.4-XSS-File-Write-Code-Execution.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000