CVE-2020-25216

Severe 9.8

yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesheet.

Published September 17, 2020.