Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/10/07 8:29 p.m.•7 views

Cross-site Scripting (XSS)

Overview @payloadcms/storage-uploadthing is a Payload storage adapter for uploadthing Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient validation of upload file identity and XML/SVG content delivery in the uploads pipeline. An authenticated attacker ca...

9.3CVSS5.3AI score0.00271EPSS
SaveExploits0References3
Rows per page
Query Builder