Search vulnerabilities

Results 2

CVE-2024-13293

POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Products
CVE-2024-13294

POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).This issue affects POST File: from 0.0.0 before 1.0.2.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Products