Jquery Upload File vulnerabilities | LiveThreat CVE Feed

Product

Jquery Upload File

by Hayageek · last CVE Feb 25, 2022

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 0Medium 1Low 0

Severity

Exploitation

Watch

Add Jquery Upload File to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-9207	9.8	3%	Nov 19	Arbitrary file upload in jQuery Upload File <= 4.0.2 Affected: through 4.0.2
CVE-2021-37504	6.1	1%	Feb 25	A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file… Affected: 4.0.11