Lucene search
+L
HayageekJquery Upload File

2 matches found

CVE
CVE
added 2022/02/25 6:15 p.m.104 views

CVE-2021-37504

CVE-2021-37504 concerns an XSS in the fileNameStr parameter of the jQuery-Upload-File library (v4.0.11). Multiple connected sources corroborate that a crafted file name containing a Javascript payload can cause arbitrary web script execution. The root cause is the unsanitized fileNameStr input; e...

6.1CVSS5.9AI score0.00867EPSS
Save
CVE
CVE
added 2018/11/19 5:00 p.m.56 views

CVE-2018-9207

CVE-2018-9207 refers to an arbitrary file upload vulnerability in jquery-file-upload (

9.8CVSS9.4AI score0.03451EPSS
Save