CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14315

A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-14315

Sunhater » Kcfinder » Version: N/A

cpe:2.3:a:sunhater:kcfinder:-
Sunhater » Kcfinder » Version: 2.52

cpe:2.3:a:sunhater:kcfinder:2.52
Sunhater » Kcfinder » Version: 2.53

cpe:2.3:a:sunhater:kcfinder:2.53
Sunhater » Kcfinder » Version: 2.54

cpe:2.3:a:sunhater:kcfinder:2.54
Sunhater » Kcfinder » Version: 3.0

cpe:2.3:a:sunhater:kcfinder:3.0
Sunhater » Kcfinder » Version: 3.10

cpe:2.3:a:sunhater:kcfinder:3.10
Sunhater » Kcfinder » Version: 3.11

cpe:2.3:a:sunhater:kcfinder:3.11
Sunhater » Kcfinder » Version: 3.12

cpe:2.3:a:sunhater:kcfinder:3.12
Sunhater » Kcfinder » Version: 3.20

cpe:2.3:a:sunhater:kcfinder:3.20

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14315

Products

Pricing

Contact Us