VendorsPicUploader Projectpicuploader2.6.3
Vulnerabilities

PicUploader Project PicUploader 2.6.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2022-41442
PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.
Published 2022-10-07 · Modified
6.1EPSS 0.005
CVE-2022-36748
PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.
Published 2022-08-30 · Modified
6.1EPSS 0.004