CVE-2026-33653 Uploady Vulnerable to Stored Cross-Site Scripting (XSS)

Ulloady is a file uploader script with multi-file upload support. A Stored Cross-Site Scripting XSS vulnerability exists in versions prior to 3.1.2 due to improper sanitization of filenames during the file upload process. An attacker can upload a file with a malicious filename containing JavaScri...

CVE-2026-33653 Uploady Vulnerable to Stored Cross-Site Scripting (XSS)

Ulloady is a file uploader script with multi-file upload support. A Stored Cross-Site Scripting XSS vulnerability exists in versions prior to 3.1.2 due to improper sanitization of filenames during the file upload process. An attacker can upload a file with a malicious filename containing JavaScri...

CVE-2026-33653

Uploady is vulnerable to a stored XSS in versions before 3.1.2 due to improper sanitization of filenames during upload. A malicious filename can execute JavaScript when displayed in the file list or details page. The issue is fixed in version 3.1.2. The available connected documents confirm the a...

Uploady Cross-Site Script Vulnerabilities

Uploady is a modern secure file upload script developed by Faris AL-Otaibi, designed to support multiple file uploads. Versions of Uploady prior to 3.1.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper filename cleaning during the file upload process, whic...

@rpldy/chunked-uploady (>=1.6.1-rc.0, <=1.9.0), @rpldy/retry-hooks (>=1.6.1-rc.0, <=1.9.0) +8 more potentially affected by CVE-2024-57082 via @rpldy/uploader (>=1.6.1-rc.0, <=1.9.0)

@rpldy/uploader NPM version =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.6.1-rc.0, =1.9.0 Source cves: CVE-2024-57082 Source advisory: GHSA-PC47-G7GV-4GPW...

react-uploady security vulnerability

react-uploady is an upload component of rpldy open source. A security vulnerability exists in react-uploady v1.8.1, which stems from the lib.createUploader function containing a prototype contamination vulnerability...