Post File Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Post File Project records in CISA KEV

No Post File Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Post File 2 records LOW

Records

2 records in Post File · all components

TI-2024-12338 CVE-2024-13294 · GHSA-9838-cxcw-r6rf

POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060

LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).This issue affects POST File: from 0.0.0 before 1.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00237 Published 2025-01-09 Fixed in 1.0.2 CWE-79

TI-2024-12337 CVE-2024-13293 · GHSA-p77c-g2ff-r9hf

POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

LOW 14

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00141 Published 2025-01-09 Fixed in 1.0.2 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	1
No CVSS	0