CVE-2024-12348

Summary (CVE-2024-12348) : The vulnerability affects Guizhou Xiaoma Technology jpress 5.1.2, specifically the Attachment Upload Handler component’s function AttachmentUtils.isUnSafe in the file path /commons/attachment/upload . Manipulating the argument files[] can cause a cross-site scripting (X...