Skip to content
OpenAdvisories

Package · npm

cloudcmd

1 known vulnerabilities.

1 result · Feed

  • High —

    Cross-Site Scripting (XSS) in cloudcmd

    Versions of `cloudcmd` before 9.1.6 are vulnerable to cross-site scripting (XSS) when listing files in a directory. The attacker must control the name of a file for this vulnerability to be exploitable. ## Recommendation Update to version 9.1.6 or later.