CVE-2022-29430

Name of the Vulnerable Software and Affected Versions KubiQ's PNG to JPG plugin versions prior to 4.1

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability that can be exploited via Cross-Site Request Forgery (CSRF). The &jpg quality parameter is vulnerable.

Recommendations For versions prior to 4.1, update to version 4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameter &jpg quality to minimize the risk of exploitation.