CVE-2018-20791

2019-02-2506:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.

CPENameOperatorVersion
responsivefilemanagereq9.12.2
responsivefilemanagereq9.13.3
responsivefilemanagereq9.10.0
responsivefilemanagereq9.9
responsivefilemanagereq9.13.4
responsivefilemanagereq9.9.4
responsivefilemanagereq9.10.1
responsivefilemanagereq9.9.5
responsivefilemanagereq9.11.3
responsivefilemanagereq9.9.1

Name	Operator	Version
responsivefilemanager	eq	9.12.2
responsivefilemanager	eq	9.13.3
responsivefilemanager	eq	9.10.0
responsivefilemanager	eq	9.9
responsivefilemanager	eq	9.13.4
responsivefilemanager	eq	9.9.4
responsivefilemanager	eq	9.10.1
responsivefilemanager	eq	9.9.5
responsivefilemanager	eq	9.11.3
responsivefilemanager	eq	9.9.1

Rows per page:

1-10 of 211

References

www.exploit-db.com/exploits/45987