Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-41442

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Picuploader Project
Products
Picuploader
CVE-2022-36748

PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Picuploader Project
Products
Picuploader
CVE-2024-44796

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Picuploader Project Xiebruce
Products
Picuploader Picuploader