Skinsoft S-Museum
2 CVEs affecting Skinsoft S-Museum. Latest disclosed: 2024-02-22. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25802 | Critical | 9.8 | 2024-02-22 | SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the attack payload is the file content. |
CVE-2024-25801 | Medium | 6.1 | 2024-02-22 | SKINsoft S-Museum 7.02.3 allows XSS via the filename of an uploaded file. Unlike in CVE-2024-25802, the attack payload is in the name (not the content) of a fi… |