Post File

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13294 MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).0.0 before 1.0.2. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Post File Drupal

NVD

CVSS 3.1

5.4

EPSS

0.2%

CVE-2024-13293 LOW PATCH Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.0.0 before 1.0.2. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

CSRF Post File Drupal

NVD

CVSS 3.1

3.1

EPSS

0.2%

CVE-2024-13294

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

XSS Post File Drupal

NVD

CVE-2024-13293

EPSS 0% CVSS 3.1

LOW PATCH Monitor

CSRF Post File Drupal

NVD