Picuploader Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Picuploader Project records in CISA KEV

No Picuploader Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Picuploader · all components

TI-2022-19900 CVE-2022-41442 · GHSA-whxf-92hp-qfgc

LOW 28

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0057 Published 2022-10-07 No fix listed CWE-79

TI-2022-16998 CVE-2022-36748 · GHSA-53v4-xg3x-p2jh

LOW 28

PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2022-08-30 No fix listed CWE-79