Skip to content
OpenAdvisories

Package · npm

vvvebjs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-29272 Public exploit Scanner template

    VvvebJs Arbitrary File Upload vulnerability

    Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.

    vvvebjs npm
  • Medium 6.1
    CVE-2024-29271

    VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability

    Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.

    vvvebjs npm