Vvveb: >> Vvvebjs Security Vulnerabilities
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-03-22
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.
CVSS Score
6.5
EPSS Score
0.893
Published
2024-03-22