Unscored CVE-2019-9093 EUVD-2019-18478GHSA-v6f2-wwcf-x463

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-suppli…

Published Mar 18, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.

References

https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md