しもしゃん@shimosyan
General
もらったCVE、2件目！！！！！！！！ ‐ CVE-2022-24435 - [New] CVE-2026-56124
Post summary
The tweet merely lists two CVE identifiers without providing any additional context or details.
03090855
2.8K followersView on X
CVE-2022-24435General(phpuploader_project / phpuploader)
LOWCVSS 6.1 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
0.0/ 10 priority
Sources & remediation
Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- phpuploader
Threat summary
- 1 mentions across 1 observed day
What's happening
- General: 1 classified signal
- 1 total mentions across 1 day
Affected systems
Vendors
Products
phpuploader
Deep dive
Activity timeline1 mentions / 1d
Signal classification1 categories
General1100.0%
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phpuploader_project | phpuploader | - | - | - |