An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload.

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by mitre