Description (CNA)
A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| icret / EasyImages | affected 2.8.0; affected 2.8.1; affected 2.8.2; affected 2.8.3; affected 2.8.4; affected 2.8.5; affected 2.8.6 |
CWE
CWE-79, CWE-94
References
- https://vuldb.com/?id.332940
- https://vuldb.com/?ctiid.332940
- https://vuldb.com/?submit.693732
- https://github.com/icret/EasyImages2.0/issues/260
ADP enrichment
No English description supplied.