Skip to content
OpenAdvisories

Vendor

Phraseanet

1 known vulnerabilities.

Products

Phraseanet DAM Open Source 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2018-25157

    Phraseanet 4.0.3 Stored XSS via Document Upload

    Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads. Attackers can upload files with embedded SVG scripts that execute in the brow…

    Phraseanet Phraseanet DAM Open Source phraseanet/phraseanet Packagist