CVE-2023-30791
Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML e
Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.
HIGH · CVSS 7.1
EPSS 0.00114
Act now
- Public exploit or PoC is available
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0