Security Advisory

CVE-2019-9093

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-03-18 22:05:36
Last updated 2024-08-04 21:38:46
Assigner mitre
State PUBLISHED

Description

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.