Skip to content
OpenAdvisories

Package · Packagist

mojo42/jirafeau

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-30110

    Cross-site Scripting in Jirafeau

    The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaS…

    mojo42/jirafeau Packagist