Skip to content
OpenAdvisories

Package · npm

pekeupload

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2021-23673

    Cross-site Scripting (XSS)

    This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.

    pekeupload npm