HayageekJquery Upload File
2 matches found
CVE-2021-37504
CVE-2021-37504 concerns an XSS in the fileNameStr parameter of the jQuery-Upload-File library (v4.0.11). Multiple connected sources corroborate that a crafted file name containing a Javascript payload can cause arbitrary web script execution. The root cause is the unsanitized fileNameStr input; e...
6.1CVSS5.9AI score0.00867EPSS
Save