Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS
Vulnerability Description
Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the file parameter. Attackers can craft URLs with script payloads in the file parameter of avatar_uploader.pages.inc to execute arbitrary JavaScript in victim browsers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-50957
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Milad karimi
Affected Vendor
avatar_uploader
View all reports →