Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Xiebruce Component: Picuploader Clear all filters
TI-2024-29997 CVE-2024-44796 · GHSA-m5j8-89q3-q39q

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of…

Priority LOW 37

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_de…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00399 Published 2024-08-26 No fix listed CWE-79
TI-2024-29995 CVE-2024-44794 · GHSA-cwhx-w267-r8qh

A cross-site scripting (XSS) vulnerability in the component…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-26 No fix listed CWE-79