Skip to content
OpenAdvisories

Vendor

class.upload.php

1 known vulnerabilities.

Products

class.upload.php 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-6551

    Stored XSS in class.upload.php

    As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing…

    class.upload.php class.upload.php verot/class.upload.php Packagist