Skip to content
OpenAdvisories

Package · Packagist

xpressengine/xpressengine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-26642

    XpressEngine file upload vulnerability

    When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacker can use this vulnerability to execute arbitrary code on th…

    XEHub XE3 XpresesEngine xpressengine/xpressengine Packagist