VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Dec 3, 2021· Updated Jun 17, 2026

CVE-2021-23562

CVE-2021-23562

Description

This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
pluploadnpm
< 2.3.92.3.9

Affected products

3
  • Tiny/Plupload
    cpe:2.3:a:tiny:plupload:*:*:*:*:*:node.js:*:*
    Range: <2.3.9
  • plupload/pluploaddescription
  • ghsa-coords
    pkg:npm/plupload
    Range: < 2.3.9

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.