CVE-2021-43683

2021-12-0213:15:07

Google

osv.dev

cross site scripting

vulnerability

pictshare

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

pictshare v1.5 is affected by a Cross Site Scripting (XSS) vulnerability in api/info.php. The exit function will terminate the script and print the message which has $_REQUEST[‘hash’].

References

github.com/HaschekSolutions/pictshare/issues/133