CVE-2021-23439

creationtimestamp| type| source ---|---|--- 2021-09-05 18:39:34+00:00| seen| https://t.me/cibsecurity/28267...

CVE-2021-23439

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded a user needs to be tricked into uploading such a file...

CVE-2021-23439 Cross-site Scripting (XSS)

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded a user needs to be tricked into uploading such a file...

CVE-2021-23439

CVE-2021-23439 affects the file-upload-with-preview package prior to version 4.2.0. A file name containing malicious JavaScript can be uploaded when a user is tricked into uploading it, enabling cross-site scripting (XSS) in affected contexts. The issue arises from lack of proper validation/escap...