PT-2022-11899

Name of the Vulnerable Software and Affected Versions kkFileview version 4.0.0 Description The issue allows for arbitrary file read through a directory traversal vulnerability, which may lead to sensitive file leak on the related host. Recommendations For kkFileview version 4.0.0, consider...

Cross-site Scripting (XSS) - Generic in kekingcn/kkfileview

Description kkFileView this package is vulnerable to Stored Cross-Site Scripting XSS. https://github.com/kekingcn/kkFileView Steps To Reproduce-: stored XSS 1 install https://github.com/kekingcn/kkFileView locally or https://file.keking.cn/index use demo 2 while uploading files for preview use js...