CVE-2021-23260 — Stored XSS Vulnerability in File Name of the File Upload function

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.

Published: 2021-12-02 · CVSS: 6.5 · CVSS 3.1

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7