Cross-Site Scripting in seeftl

All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...

GHSA-4G46-5GRC-WQ49 Cross-Site Scripting in seeftl

All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...

Cross-Site Scripting

Overview All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Conside...

PT-2020-9727

Name of the Vulnerable Software and Affected Versions seefl version 0.1.1 seeftl versions affected versions not specified Description The issue concerns a stored Cross-Site Scripting XSS vulnerability. It occurs when a malicious filename is rendered in a directory listing, allowing attackers to...

Cross-site Scripting (XSS)

seeftl is vulnerable to cross-site scripting XSS. During the directories listing, the input filename is not escaped before printing the user input directly on the screen, allowing an attacker to inject arbitrary script...