CVE-2022-40358 - An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload

MEDIUM

An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload

Published Sep 23, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.66%

An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://cxsecurity.com/issue/WLB-2022090059		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43649		Advisory
https://sourceforge.net/projects/ajaxplorer/files/ajaxplorer/stable-channel/4.2.3/		x_refsource_MISCRelease NotesThird Party Advisory