hayageek

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

hayageek records in CISA KEV

No hayageek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jquery Upload File 2 records MEDIUM

Records

2 records in Jquery Upload File · all components

TI-2018-06681 CVE-2018-9207 · GHSA-mxr5-p36v-479m

Arbitrary file upload in jQuery Upload File <= 4.0.2

MEDIUM 48

Arbitrary file upload in jQuery Upload File <= 4.0.2

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03451 Published 2018-11-19 Fixed in 4.0.5 CWE-434

TI-2021-15415 CVE-2021-37504 · GHSA-43x9-7hfv-mxrf

A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of…

LOW 29

A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file nam…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00867 Published 2022-02-25 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0