Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
added 2022/02/26 12:0 a.m.34 views

jQuery-Upload-File XSS in fileNameStr

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS5.7AI score0.00859EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/02/26 12:0 a.m.23 views

GHSA-43X9-7HFV-MXRF jQuery-Upload-File XSS in fileNameStr

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00859EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/25 7:15 p.m.7 views

CVE-2021-37504

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00859EPSS
SaveExploits0References8
OSV
OSV
added 2022/02/25 7:15 p.m.10 views

CVE-2021-37504

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

6.1CVSS6.5AI score0.00859EPSS
SaveExploits0References7
Prion
Prion
added 2022/02/25 7:15 p.m.24 views

Cross site scripting

A cross-site scripting XSS vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name...

4.3CVSS5.9AI score0.00859EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder