Post File

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13294 PHP MEDIUM PATCH This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal POST File allows Cross-Site Scripting (XSS).0.0 before 1.0.2. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Drupal Post File

NVD

CVSS 3.1

5.4

EPSS

0.2%

CVE-2024-13293 PHP LOW PATCH Monitor

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.0.0 before 1.0.2. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

CSRF Drupal Post File

NVD

CVSS 3.1

3.1

EPSS

0.2%

CVE-2024-13294 PHP

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

XSS Drupal Post File

NVD

CVE-2024-13293 PHP

EPSS 0% CVSS 3.1

LOW PATCH Monitor

CSRF Drupal Post File

NVD