4 matches found
GHSA-4G46-5GRC-WQ49 Cross-Site Scripting in seeftl
All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...
Cross-Site Scripting in seeftl
All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Consider using a...
Cross-Site Scripting
Overview All versions of seeftl are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. Recommendation No fix is currently available. Conside...
Cross-site Scripting (XSS)
seeftl is vulnerable to cross-site scripting XSS. During the directories listing, the input filename is not escaped before printing the user input directly on the screen, allowing an attacker to inject arbitrary script...