Lucene search
PRIOn knowledge basePRION:CVE-2019-14315HistoryJul 28, 2019 - 1:15 a.m.
Cross site scripting
2019-07-2801:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
48.4%
A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kcfinder | le | 3.12 | |
| kcfinder | eq | 3.20 test1 | |
| kcfinder | eq | 3.20 test2 |
References
Related
osv
osv
CVE-2019-14315
2019-07-28 01:15:10
SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php
2022-05-24 16:51:33
cvelist
cvelist
CVE-2019-14315
2019-07-28 00:23:02
nvd
nvd
CVE-2019-14315
2019-07-28 01:15:10
cve
cve
CVE-2019-14315
2019-07-28 01:15:10
github
github
SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php
2022-05-24 16:51:33