CVE-2020-19625: Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows...

Security readout for executives and security teams

CVE-2020-19625 describes remote code execution in a test support PHP file associated with oria gridx 1.3. If that test file is deployed and reachable from the internet, an attacker may be able to run arbitrary code. The public record does not provide CVSS, CPE, or confirmed fix details. Likely exposure is limited to systems that use oria gridx 1.3 and expose the test support path in a deployed web root. Production systems that exclude test files or block tests/support paths are less likely to be reachable. Asset metadata in the CVE record is incomplete. Treat this as high priority where gridx 1.3 test files are internet-accessible. The main business risk is server compromise through a mistakenly deployed test endpoint. If the file is absent or blocked, residual urgency is lower but should still be documented. Mitigation focus: Remove test and support files from production deployments.; Block public access to tests/support paths at the web server or edge.; Check the GitHub issue and vendor guidance for fixed-version information..

Prepared

Jun 3, 2026, 02:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.