CVE-2022-24435

shimosyan/phpUploader

on github

Published

February 24, 2022

Severity

CVSS v3:

6.1 MEDIUM

CVSS v2:

4.3 MEDIUM

Description

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

References

https://github.com/shimosyan/phpUploader/releases/tag/v1.2.1
https://jvn.jp/en/jp/JVN00095004/index.html

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:phpuploader_project:phpuploader::::::::	n/a	1.2 (including)	*

External Links

NVD - CVE-2022-24435