CVE-2026-75331 - tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController.java have no file type validation. Attackers can upload arbitrary HTML/JavaScript files to the server. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-18983 [高危] CVE-2026-18983 - The One User Avatar | User Profile Picture plugin for…
• CVE-2026-81931 [未知] CVE-2026-81931 - Unrestricted Upload of File with Dangerous Type in th…
• CVE-2026-77991 [未知] CVE-2026-77991 - Joomla Extension - joomlaeventmanager.net - Privilege…
• CVE-2026-77018 [高危] CVE-2026-77018 - The Workeera WordPress plugin before 1.0.6 does not …
• CVE-2026-75331 [中危] CVE-2026-75331 - tamguo 1.5.3 is vulnerable to Unrestricted File Uploa…
• CVE-2025-61165 [危急] CVE-2025-61165 - An arbitrary file upload vulnerability in the /v1/my_…
• CVE-2026-16601 [高危] CVE-2026-16601 - The CM Map Locations – Visualize and share your locat…
• CVE-2026-56702 [高危] CVE-2026-56702 - Adminer versions before 5.4.3 contain an unrestricted…