CVE-2020-11712

Name of the Vulnerable Software and Affected Versions Open Upload versions 0.4.3 and earlier

Description The issue allows for XSS exploitation via the "index.php?action=u" endpoint, specifically through the filename field. This can lead to malicious script execution.

Recommendations For Open Upload versions 0.4.3 and earlier, as a temporary workaround, consider restricting access to the "index.php?action=u" endpoint until a patch is available. Avoid using the filename field in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.