Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2022/02/26 12:00 a.m.•39 views

jQuery-Upload-File XSS in fileNameStr

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS5.7AI score0.00867EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/02/26 12:00 a.m.•166 views

GHSA-43X9-7HFV-MXRF jQuery-Upload-File XSS in fileNameStr

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00867EPSS
SaveExploits0References3
OSV
OSV
•added 2022/02/25 7:15 p.m.•16 views

CVE-2021-37504

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00867EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2022/02/25 7:15 p.m.•10 views

CVE-2021-37504

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00867EPSS
SaveExploits0References8
Prion
Prion
•added 2022/02/25 7:15 p.m.•29 views

Cross site scripting

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

4.3CVSS5.9AI score0.00867EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/25 12:00 a.m.•3 views

CVE-2021-37504: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00867EPSS
SaveExploits0References12
Rows per page
Query Builder