Unscored CVE-2022-24435 EUVD-2022-29323GHSA-w7cc-xpv6-f653

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script v…

Published Feb 24, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Dojin Club MICMNIS Product: phpUploader

Description

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Dojin Club MICMNIS	phpUploader	v1.2 and earlier	—

References

https://github.com/shimosyan/phpUploader/releases/tag/v1.2.1
https://jvn.jp/en/jp/JVN00095004/index.html