CVE-2022-27910 Extension - Joomlatools - DOCman - Reflected Cross-Site Scripting (XSS) in an image upload function

2022-06-1400:00:00

Joomla

www.cve.org

0.001 Low

EPSS

Percentile

31.5%

JSON

In Joomla component ‘Joomlatools - DOCman 3.5.13 (and likely most versions below)’ are affected to an reflected Cross-Site Scripting (XSS) in an image upload function

CNA Affected

[
  {
    "product": "DOCman",
    "vendor": "Joomlatools",
    "versions": [
      {
        "status": "affected",
        "version": "<=3.5.13"
      }
    ]
  }
]

References

www.joomlatools.com/extensions/docman/changelog/3.5.14

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for CVELIST:CVE-2022-27910