2 matches found
EUVD-2026-42152
An authenticated stored cross-site scripting XSS vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via injecting a crafted payload into the Name parameter...
5.4CVSS6AI score0.00235EPSS
SaveExploits0References3
CVE-2026-36162: Improper Neutralization of Input During Web Page Generation
An authenticated stored cross-site scripting XSS vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via injecting a crafted payload into the Name parameter...
5.4CVSS6.1AI score0.00235EPSS
SaveExploits0References2
20