Lucene search
MitreCVELIST:CVE-2021-37504HistoryFeb 25, 2022 - 6:15 p.m.
CVE-2021-37504
2022-02-2518:15:47
mitre
www.cve.org
0.002 Low
EPSS
Percentile
56.6%
A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
References
ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
hayageek.github.io/jQuery-Upload-File/4.0.11/jquery.uploadfile.min.js
hayageek.github.io/jQuery-Upload-File/4.0.11/uploadfile.css
haygeek.com
jquery-upload-file.com
github.com/hayageek/jquery-upload-file/blob/master/js/jquery.uploadfile.js#L469
raw.githubusercontent.com/hayageek/jquery-upload-file/master/js/jquery.uploadfile.js
Related
cve
cve
CVE-2021-37504
2022-02-25 19:15:12
cnvd
cnvd
Hayageek Jquery Upload File Cross-Site Scripting Vulnerability
2022-03-01 00:00:00
nvd
nvd
CVE-2021-37504
2022-02-25 19:15:12
prion
prion
Cross site scripting
2022-02-25 19:15:00
osv
osv
jQuery-Upload-File XSS in fileNameStr
2022-02-26 00:00:39
github
github
jQuery-Upload-File XSS in fileNameStr
2022-02-26 00:00:39