Skip to content
OpenAdvisories

Package · Packagist

fof/upload

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2022-30999

    Possible cross-site scripting attack via unsanitized SVG files in FoF Upload

    FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allow the uploading of SVG files ('image/svg+xml'), navigating directly to an SVG file URI could execute…

    FriendsOfFlarum upload fof/upload Packagist