Picuploader Security Vulnerabilities and Issues — Picuploader CVE List

Lucene search

Picuploader ProjectPicuploader

3 matches found

CVE•added 2024/08/26 8:15 p.m.•44 views

CVE-2024-44796

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.

8CVSS5.6AI score0.00179EPSS

CVE•added 2022/08/30 10:15 p.m.•41 views

CVE-2022-36748

PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.

6.1CVSS6AI score0.00106EPSS

CVE•added 2022/10/07 10:15 p.m.•39 views

CVE-2022-41442

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

6.1CVSS6AI score0.00105EPSS