@into-cps-association/libms (0.5.9) potentially affected by CVE-2026-82460 via cloudcmd (19.8.15)

cloudcmd NPM version 19.8.15 is affected by a known vulnerability. The following packages have a transitive dependency on cloudcmd and may be impacted: - @into-cps-association/libms 0.5.9 Source cves: CVE-2026-82460 Source advisory: MEND:CVE-2026-82460...

cloudcmd (>=5.0.5, <=9.3.2), console-io (>=2.5.2, <=5.0.0) +22 more potentially affected by unknown CVE via ponse (>=1.0.1, <=1.6.1)

ponse NPM version =1.0.1, =5.0.5, =2.5.2, =0.0.0, =0.1.0, =2.7.4, =0.3.0, =1.0.0, =1.0.0, =0.0.1, =0.2.0, =1.0.0, =1.0.0, =1.0.9, =1.0.0, =1.0.0, =1.3.6 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0149...

WS-2018-0098

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable...

iocmd (>=0.2.0, <=0.2.1) potentially affected by unknown CVE via cloudcmd (5.13.0)

cloudcmd NPM version 5.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on cloudcmd and may be impacted: - iocmd =0.2.0, =0.2.1 Source cves: unknown CVE Source advisory: MEND:WS-2018-0098...

Cross-Site Scripting (XSS) in cloudcmd

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later...

GHSA-M8FW-534V-XM85 Cross-Site Scripting (XSS) in cloudcmd

Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later...

PT-2019-20057

Name of the Vulnerable Software and Affected Versions cloudcmd versions prior to 9.1.6 Description The issue allows for cross-site scripting XSS when listing files in a directory, provided the attacker has control over the name of a file. Recommendations Update to version 9.1.6 or later...

cloudcmd (>=5.0.5, <=5.0.15), dword (>=2.7.4, <=2.9.1) +1 more potentially affected by CVE-2016-10528 via restafary (1.5.3)

restafary NPM version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on restafary and may be impacted: - cloudcmd =5.0.5, =2.7.4, =2.7.3, =2.9.0 Source cves: CVE-2016-10528 Source advisory: OSV:GHSA-XG5R-8J97-2WRJ...

cloudcmd (>=5.0.5, <=5.0.15), dword (>=2.7.4, <=2.9.1) +1 more potentially affected by CVE-2016-10528 via restafary (1.5.3)

restafary NPM version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on restafary and may be impacted: - cloudcmd =5.0.5, =2.7.4, =2.7.3, =2.9.0 Source cves: CVE-2016-10528 Source advisory: GHSA-XG5R-8J97-2WRJ...

cloudcmd (>=5.0.5, <=5.0.15), dword (>=2.7.4, <=2.9.1) +1 more potentially affected by CVE-2016-10528 via restafary (1.5.3)

restafary NPM version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on restafary and may be impacted: - cloudcmd =5.0.5, =2.7.4, =2.7.3, =2.9.0 Source cves: CVE-2016-10528 Source advisory: MEND:CVE-2016-10528...

Cross-Site Scripting (XSS)

Overview Versions of cloudcmd before 9.1.6 are vulnerable to cross-site scripting XSS when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. Recommendation Update to version 9.1.6 or later. References - HackerOne...

Cross-site Scripting (XSS)

cloudcmd is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the improper sanitization of filename which allows arbitrary javascript code to be executed when rendered...

Node.js third-party modules: [cloudcmd] Stored XSS in the filename when directories listing

I would like to report a Stored XSS issue in module cloudcmd It allows executing malicious javascript code in the user's browser. Module module name: cloudcmd version: 9.1.5 npm page: https://www.npmjs.com/package/cloudcmd Module Description Cloud Commander is an orthodox web file manager with...