TI-2020-14433 CVE-2020-23037 · GHSA-82xm-3j43-mh7mPortable Ltd Playable v9.18 contains a code injection vulnerability in the filename…Priority MEDIUM 45Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2021-10-22 · No fix listed CWE-94