Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23673

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-89q5-mj78-pw5w

Cross-site Scripting in pekeupload This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.

gitlab/npm/pekeupload/CVE-2021-23673

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.

gitlab/npm/plupload/CVE-2021-23673

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.