← All advisories

Medium severity6.1NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2022-41442

CVE-2022-41442

Description

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

PicUploader/PicUploaderdescription
xiebruce/PicUploaderllm-fuzzy
Range: <2.6.3

Patches

Vulnerability mechanics

References

2

github.com/xiebruce/PicUploader/commit/2b0411bddb7942e0ace136a82d4ccde0fe66f263nvdPatchThird Party Advisory
github.com/xiebruce/PicUploader/issues/80nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.