| Package | Affected versions | Patched versions |
|---|---|---|
| studio-42/elfinder | ≥ 2.0.4, < 2.1.60 | 2.1.60 |
| elfinder | ≥ 2.0.4, ≤ 2.1.59 |
A File Upload vulnerability exists in Studio-42 elFinder 2.0.4 to 2.1.59 via connector.minimal.php, which allows a remote malicious user to upload arbitrary files and execute PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free