Sunhater Kcfinder
3 CVEs affecting Sunhater Kcfinder. Latest disclosed: 2021-01-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25002 | High | 8.8 | 2021-01-01 | uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covere… |
CVE-2019-14315 | Medium | 6.1 | 2019-07-28 | A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbit… |
CVE-2014-3988 | | 2014-12-03 | Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via… |