Vendor

xiebruce

Products

CVEs

Across products

Status

Private

Products

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2024-44796	PicUploader PicUploader	Med	0.40	6.1	Aug 26, 2024	A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.
CVE-2024-44794	xiebruce PicUploader	Med	0.40	6.1	Aug 26, 2024	A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.
CVE-2022-36748	xiebruce PicUploader	Med	0.40	6.1	Aug 30, 2022	PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.
CVE-2022-41442	xiebruce PicUploader	Med	0.00	6.1	Oct 7, 2022	PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

CVE-2024-44796MedAug 26, 2024
PicUploader
PicUploader
risk 0.40cvss 6.1epss 0.00
A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.
CVE-2024-44794MedAug 26, 2024
xiebruce
PicUploader
risk 0.40cvss 6.1epss 0.00
A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_description parameter.
CVE-2022-36748MedAug 30, 2022
xiebruce
PicUploader
risk 0.40cvss 6.1epss 0.00
PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.
CVE-2022-41442MedOct 7, 2022
xiebruce
PicUploader
risk 0.00cvss 6.1epss 0.00
PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.