Archive
5 September 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 4.2
Cross-site Scripting (XSS)
This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).