GHSA-M8FW-534V-XM85 Cross-Site Scripting (XSS) in cloudcmd

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later...

Cross-Site Scripting (XSS) in cloudcmd

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later...

cloudcmd (>=5.0.5, <=5.0.15), dword (>=2.7.4, <=2.9.1) +1 more potentially affected by CVE-2016-10528 via restafary (1.5.3)

restafary NPM version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on restafary and may be impacted: - cloudcmd =5.0.5, =2.7.4, =2.7.3, =2.9.0 Source cves: CVE-2016-10528 Source advisory: OSV:GHSA-XG5R-8J97-2WRJ...

Cross-Site Scripting (XSS)

Overview Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later. References - HackerOne...

Cross-site Scripting (XSS)

cloudcmd is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the improper sanitization of filename which allows arbitrary javascript code to be executed when rendered...

Node.js third-party modules: [cloudcmd] Stored XSS in the filename when directories listing

I would like to report a Stored XSS issue in module cloudcmd It allows executing malicious javascript code in the user's browser. Module module name: cloudcmd version: 9.1.5 npm page: https://www.npmjs.com/package/cloudcmd Module Description Cloud Commander is an orthodox web file manager with...