← Back

Picuploader

picuploader

Vendor: Picuploader Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-41442
1Picuploader Project
1Picuploader
Jun 17, 2026
Oct 7, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
PicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the setStorageParams function in SettingController.php.
CVE-2022-36748
1Picuploader Project
1Picuploader
Jun 17, 2026
Aug 30, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.