Skip to content
OpenAdvisories

Package · npm

file-upload-with-preview

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.2
    CVE-2021-23439

    Cross-site Scripting (XSS)

    This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).

    file-upload-with-preview npm