CVE-2025-47929

DumbDrop, a file upload application that provides an interface for dragging and dropping files, has a DOM cross-site scripting vulnerability in the upload functionality prior to commit db27b25372eb9071e63583d8faed2111a2b79f1b. A user could be tricked into uploading a file with a malicious payload...

CVE-2025-47929

CVE-2025-47929 : DumbDrop has a DOM-based cross-site scripting vulnerability in the upload functionality present before commit db27b25372eb9071e63583d8faed2111a2b79f1b. A user could be tricked into uploading a file containing a malicious payload, enabling/script injection in the browser context. ...