Read the docs

Webform Multiple File Upload Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Webform Multiple File Upload Project records in CISA KEV

No Webform Multiple File Upload Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webform Multiple File Upload 2 records LOW

Records

2 records

TI-2025-11769 CVE-2025-12848 · GHSA-5q8c-r7p8-3p9v

XSS vulnerability when rendering filename in Webform Multiform

Priority LOW 31

Webform Multiple File Upload module for Drupal 7.x contains a cross-site scripting (XSS) vulnerability in the file name renderer.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00357 Published 2025-11-26 No fix listed CWE-79
TI-2015-03677 CVE-2015-4379 · GHSA-48f6-v2pm-x9f8

Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of certain user…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00725 Published 2015-06-15 No fix listed CWE-352
Open these records in search →