Unscored CVE-2019-9094 EUVD-2019-18479GHSA-46v9-f637-4p8c

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-…

Published Mar 18, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.

References

https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md