Dhtmlx: Security Vulnerabilities
Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the File Listing function.
CVSS Score
6.5
EPSS Score
0.004
Published
2025-02-07
Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-02-07
Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter.
CVSS Score
4.3
EPSS Score
0.087
Published
2013-10-25