medium4.8
CVE-2022-25574
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a cra…
Impact
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Douco | Douphp | Version 1.6 |