Lucene search
Veracode Vulnerability DatabaseVERACODE:33186HistoryDec 06, 2021 - 9:55 a.m.
Cross-site Scripting (XSS)
2021-12-0609:55:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
70.7%
plupload is vulnerable to cross-site scripting. The vulnerability exists in addFiles function of jquery.ui.plupload.js because the html entities have not been encoded properly which allows an malicious attacker to perform unauthorized file uploads.
Related
cve
cve
CVE-2021-23562
2021-12-03 20:15:07
github
github
Code injection in plupload
2021-12-16 15:32:31
nvd
nvd
CVE-2021-23562
2021-12-03 20:15:07
osv
osv
Code injection in plupload
2021-12-16 15:32:31
CVE-2021-23562
2021-12-03 20:15:07
prion
prion
Design/Logic Flaw
2021-12-03 20:15:00
cvelist
cvelist
CVE-2021-23562 Arbitrary File Upload
2021-12-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-23562
2021-12-03 00:00:00