Z-Downloads < 1.11.7 - Cross-Site Scripting
The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.
z-downloadsPoC 已收录
CVSS3.5EPSS 6.0%
暂无产品描述。
共找到 1 条公开漏洞记录
The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.