Skip to content

Vendor

swfupload project vulnerabilities

2 published CVES affecting swfupload project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of swfupload project alerts

Products

Latest swfupload project CVEs

Newest publication first

  2. CVE-2012-3414 SWFUpload <= 2.2.0.1 - Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 9.4%

    Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.