Unrestricted file upload allowed the attacker to manipulate the request and bypass the protection of HTML files using a text file. Stored XSS may be obtained.
{ "nvd_published_at": "2022-05-23T16:16:00Z", "cwe_ids": [ "CWE-434", "CWE-79" ], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-06-03T22:17:16Z" }