CVE-2021-23439

Cross-site Scripting (XSS)

Medium · published September 5, 2021

CVSS v3.1
4.2
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P
CVSS v4.0
Not supplied
EPSS
0.00893 · 59.1th percentile
Published
2021-09-05T14:10Z
EPSS history
Timeline
  • 05 SEP 14:10Z
    Cross-site Scripting (XSS)
    cvelistv5