medium6.1
CVE-2020-11712
Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.
Impact
Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Upload Project | Open Upload | through 0.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/jenaye/cve/blob/master/readme.MD
- https://sourceforge.net/p/openupload/news/
- https://sourceforge.net/p/openupload/openupload-code/commit_browser
- https://github.com/jenaye/cve/blob/master/readme.MD
- https://sourceforge.net/p/openupload/news/
- https://sourceforge.net/p/openupload/openupload-code/commit_browser