Vulnerability Details CVE-2022-30110
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2022-30110
-
cpe:2.3:a:jirafeau:jirafeau:1.0
-
cpe:2.3:a:jirafeau:jirafeau:1.1
-
cpe:2.3:a:jirafeau:jirafeau:1.2.0
-
cpe:2.3:a:jirafeau:jirafeau:2.0.0
-
cpe:2.3:a:jirafeau:jirafeau:3.0.0
-
cpe:2.3:a:jirafeau:jirafeau:3.1.0
-
cpe:2.3:a:jirafeau:jirafeau:3.2.0
-
cpe:2.3:a:jirafeau:jirafeau:3.2.1
-
cpe:2.3:a:jirafeau:jirafeau:3.3.0
-
cpe:2.3:a:jirafeau:jirafeau:3.4.0
-
cpe:2.3:a:jirafeau:jirafeau:3.4.1