Skip to content
OpenAdvisories

Archive

5 September 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 4.2

    Cross-site Scripting (XSS)

    This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).