Description
Studio 42 elFinder through 2.1.31 allows XSS via an SVG document.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | studio-42/elfinder | <= 2.1.31 | — | GHSA-c3j8-q5x6-2855 |
Medium · 5.4
CVE-2021-45919
EUVD-2022-0949GHSA-c3j8-q5x6-2855
Studio 42 elFinder allows stored XSS
Published Feb 8, 2022 · Updated Aug 4, 2024 · Assigned by mitre