Lucene search
GoogleOSV:GHSA-43X9-7HFV-MXRFHistoryFeb 26, 2022 - 12:00 a.m.
jQuery-Upload-File XSS in fileNameStr
2022-02-2600:00:39
Google
osv.dev
2
A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jquery-file-upload | le | 4.0.11 |
Related
cve
cve
CVE-2021-37504
2022-02-25 19:15:12
cnvd
cnvd
Hayageek Jquery Upload File Cross-Site Scripting Vulnerability
2022-03-01 00:00:00
nvd
nvd
CVE-2021-37504
2022-02-25 19:15:12
prion
prion
Cross site scripting
2022-02-25 19:15:00
cvelist
cvelist
CVE-2021-37504
2022-02-25 18:15:47
github
github
jQuery-Upload-File XSS in fileNameStr
2022-02-26 00:00:39