Lucene search

K
osvGoogleOSV:GHSA-VWH5-78JC-HPJX
HistoryMay 24, 2022 - 4:51 p.m.

SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php

2022-05-2416:51:33
Google
osv.dev
2

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

Related for OSV:GHSA-VWH5-78JC-HPJX