Description Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field. References https://github.com/jenaye/cve/blob/master/readme.MD https://sourceforge.net/p/openupload/openupload-code/commit_browser https://sourceforge.net/p/openupload/news/