← All credits
Huy Nguyen
11 vulnerability records and advisories credit this contributor.
CVE-2021-23814
This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading.
An attacker may be able to reproduce the following steps:
1. Install a package with a web
CVE-2021-24813
Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting
CVE-2021-24830
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
CVE-2021-24812
BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting
CVE-2021-24810
WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
CVE-2021-24793
WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site Scripting
CVE-2021-24768
WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scripting
CVE-2021-24794
Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting
CVE-2021-24708
WP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting
CVE-2021-24714
WP All Import < 3.6.3 - Admin+ Stored Cross-Site Scripting