Skip to content
OpenAdvisories

Package · Maven

com.googlecode.gwtupload:gwtupload

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2020-9447

    Cross-site Scripting in GwtUpload

    There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to…

    com.googlecode.gwtupload:gwtupload Maven