Skip to content
OpenAdvisories

Package · Packagist

sunhater/kcfinder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2019-14315

    SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php

    A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.

    sunhater/kcfinder Packagist