CVE-2024-50807

Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions

Medium · published January 10, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.0th percentile
Published
2025-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Trippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload using the svg and pdf extensions
    cvelistv5