Cross-site scripting (XSS) vulnerability in index.php in... · CVE-2014-3988 · GitHub Advisory Database · GitHub

Cross-site scripting (XSS) vulnerability in index.php in...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) file or (2) directory (folder) name of an uploaded file.

References

Published by the National Vulnerability Database

Dec 3, 2014

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023