Medium severity5.4NVD Advisory· Published Jul 11, 2023· Updated Jun 17, 2026
CVE-2023-37658
CVE-2023-37658
Description
fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:fastposter:fast-poster:2.15.0:*:*:*:*:*:*:*
- fast-poster/fast-posterdescription
- Range: <=2.15.0
Patches
Vulnerability mechanics
References
1- github.com/psoho/fast-poster/issues/13nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.