~ / search / GHSA-c3j8-q5x6-2855

GHSA-c3j8-q5x6-2855

Studio 42 elFinder allows stored XSS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-45919

Packages

EcosystemPackageAffectedFixed in
Packagist studio-42/elfinder <= 2.1.31 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document.

References

External links from the advisory. They lead to third-party sites.