VendorsStd42elfinder2.1.62
Vulnerabilities

Std42 elFinder 2.1.62

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-52044
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.
Published 2024-10-31 · Analyzed
9.8EPSS 0.008
CVE-2023-52045
Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability.
Published 2024-10-31 · Analyzed
6.1EPSS 0.003