CVE-2022-41442

MEDIUM CVSS: 6.1 Published: 2022-10-07 Modified: 2026-06-17

Description

PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.

Affected Platforms

Picuploader Project Picuploader

Weakness Type

CWE-79

References