cbcvebase.

Tiny Plupload vulnerabilities

1 known vulnerability affecting tiny/plupload.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-23562P2HIGHCVSS 8.8Exploitedfixed in 2.3.9≥ unspecified, < 2.3.92021-12-03
CVE-2021-23562 [HIGH] CWE-434 CVE-2021-23562: This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uplo This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.
ghsanvdosv
Tiny Plupload vulnerabilities | cvebase