Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-23673

Cross-site Scripting (XSS)

Description

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a pekeupload

  • 0 to < unspecifiedaffected

References