| Package | Affected versions | Patched versions |
|---|---|---|
| file-upload-with-preview | < 4.2.0 | 4.2.0 |
| file-upload-with-preview | < 4.2.0 | 4.2.0 |
This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free