Medium · 6.1 Scanner template CVE-2022-40879 EUVD-2022-44135GHSA-v632-53j2-53ph

kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

Published Sep 29, 2022 · Updated May 20, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

kkFileView 4.1.0 - Cross-Site Scripting http/cves/2022/CVE-2022-40879.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/kekingcn/kkFileView/issues/389