Description
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
References
- 45987 exploit
Published Feb 25, 2019 · Updated Aug 5, 2024 · Assigned by mitre
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.