EUVD-2022-0802

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Cross-site scripting vulnerability in jQuery-Upload-File v4.0.11 allows arbitrary script execution

Reporter	Title	Published	Views	Family All 12
CNNVD	Hayageek Jquery Upload File跨站脚本漏洞	25 Feb 202200:00	–	cnnvd
CNVD	Hayageek Jquery Upload File Cross-Site Scripting Vulnerability	1 Mar 202200:00	–	cnvd
CVE	CVE-2021-37504	25 Feb 202218:15	–	cve
Cvelist	CVE-2021-37504	25 Feb 202218:15	–	cvelist
Github Security Blog	jQuery-Upload-File XSS in fileNameStr	26 Feb 202200:00	–	github
NVD	CVE-2021-37504	25 Feb 202219:15	–	nvd
OSV	CVE-2021-37504	25 Feb 202219:15	–	osv
OSV	GHSA-43X9-7HFV-MXRF jQuery-Upload-File XSS in fileNameStr	26 Feb 202200:00	–	osv
Prion	Cross site scripting	25 Feb 202219:15	–	prion
Positive Technologies	PT-2022-10654 · Unknown · Jquery File Upload	25 Feb 202200:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "ec4eb495-57ee-383c-bd56-fb9b7a9d6f8b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "86aabccd-d7bf-3d81-b847-636b36aed7d2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37504
github	www.github.com/hayageek/jquery-upload-file
github	www.github.com/hayageek/jquery-upload-file/blob/master/js/jquery.uploadfile.js
ajax	www.ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
hayageek	www.hayageek.github.io/jQuery-Upload-File/4.0.11/jquery.uploadfile.min.js
hayageek	www.hayageek.github.io/jQuery-Upload-File/4.0.11/uploadfile.css
haygeek	www.haygeek.com/
jquery-upload-file	www.jquery-upload-file.com/
raw	www.raw.githubusercontent.com/hayageek/jquery-upload-file/master/js/jquery.uploadfile.js

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

CVSS 24.3

EPSS0.00717