Description

Multiple cross-site scripting (XSS) vulnerabilities exist in Maian Uploader. Various parameters are not properly sanitized before being rendered in HTML output.

Impact

Attackers can inject malicious JavaScript that executes in other users' browsers, enabling session hijacking and credential theft.

Solution

Upgrade to the latest version of Maian Uploader.

References