CVE-2026-16484

creationtimestamp| type| source ---|---|--- 2026-07-21 21:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6seqmyr62x...

CVE-2017-16484

...

CVE-2017-16484

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-16484

A XSS vulnerability was found in module m-server 1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names...

CVE-2018-16484

The CVE-2018-16484 entry concerns m-server prior to 1.4.2, where filenames displayed in directory listings are not escaped, allowing stored XSS via crafted filenames to execute malicious JavaScript/HTML. Affected component: m-server (module used for static HTTP serving); root cause: lack of escap...