A cross-site scripting (XSS)... CVE-2019-14315

4.3 AV AC AU C I A
发布： 2019-07-28
修订： 2019-12-10

A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有3条受影响产品信息