2 matches found
CVE-2023-37658: Improper Neutralization of Input During Web Page Generation
fast-poster v2.15.0 is vulnerable to Cross Site Scripting XSS. File upload check binary of img, but without strictly check file suffix at /server/fast.py - ApiUploadHandler.post causes stored XSS...
5.4CVSS6AI score0.00384EPSS
SaveExploits1References2
20