Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2021-2480

Malware in sbrugna...

6.1CVSS6.2AI score0.0024EPSS
Exploits1References5
OSV
OSV
added 2021/12/02 5:52 p.m.16 views

GHSA-89Q5-MJ78-PW5W Cross-site Scripting in pekeupload

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

6.1CVSS6.2AI score0.0024EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/12/02 5:52 p.m.30 views

Cross-site Scripting in pekeupload

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

6.1CVSS3.2AI score0.0024EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/11/22 5:15 p.m.1 views

CVE-2021-23673

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

6.1CVSS5.8AI score0.0024EPSS
Exploits1References2
NVD
NVD
added 2021/11/22 5:15 p.m.10 views

CVE-2021-23673

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

6.1CVSS0.0024EPSS
Exploits1References2
Prion
Prion
added 2021/11/22 5:15 p.m.8 views

Design/Logic Flaw

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

4.3CVSS6.3AI score0.0024EPSS
Exploits1References2
CVE
CVE
added 2021/11/22 5:0 p.m.35 views

CVE-2021-23673

CVE-2021-23673 affects all versions of the jQuery plugin pekeupload . An attacker can induce a user to upload a file whose name contains JavaScript, which will be executed in the user’s browser, enabling a Cross-site Scripting (XSS) attack. The vulnerability is documented across multiple sources ...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/11/22 5:0 p.m.12 views

CVE-2021-23673 Cross-site Scripting (XSS)

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed...

5.4CVSS6.5AI score0.0024EPSS
Exploits1References2
CNVD
CNVD
added 2021/11/04 12:0 a.m.15 views

pekeUpload cross-site scripting vulnerability

PekeUpload is a Jquery Html5 file upload plugin from the personal developer Pedro Molina in Colombia. pekeUpload suffers from a cross-site scripting vulnerability that exists due to insufficient cleanup of user-supplied data. A remote attacker could exploit the vulnerability to be able to trick a...

6.1CVSS4.9AI score0.0024EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/01 12:0 a.m.1 views

PekeUpload 跨站脚本漏洞

PekeUpload is a Jquery Html5 file upload plugin from the personal developer Pedro Molina in Colombia. pekeUpload suffers from a cross-site scripting vulnerability that exists due to insufficient cleanup of user-supplied data. A remote attacker could exploit the vulnerability to be able to trick a...

6.1CVSS5.8AI score0.0024EPSS
Exploits1References3
Snyk
Snyk
added 2021/09/08 5:3 p.m.2 views

Cross-site Scripting (XSS)

Overview pekeupload is a jQuery plugin that allows you to easily add multiple or single file upload functionality to your website. This plugin uses html5 only. Affected versions of this package are vulnerable to Cross-site Scripting XSS. If an attacker induces a user to upload a file whose name...

6.1CVSS5.5AI score0.0024EPSS
Exploits1References2
Rows per page
Query Builder