← Database

CVE-2022-24435

MEDIUM CVSS: 6.1 Published: 2022-02-24 Modified: 2026-06-17

Description

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Affected Platforms

Phpuploader Project Phpuploader

Weakness Type

CWE-79

References