Picuploader Project Picuploader
2 CVEs affecting Picuploader Project Picuploader. Latest disclosed: 2022-10-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41442 | Medium | 6.1 | 2022-10-07 | PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php. |
CVE-2022-36748 | Medium | 6.1 | 2022-08-30 | PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php. |