medium6.1
CVE-2022-24435
Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vecto…
Impact
Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpuploader Project | Phpuploader | through 1.2 |