Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-9094
4.3
MEDIUMCVSS v2
Published
March 21, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.
humhub/humhub
GitHubHumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
GitHubHumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.= 1.3.10NVD