CVE-2012-1293
EPSS 0.53%Published: 9/25/2012Modified: 5/10/2026
Description
Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20111129-2 allow remote attackers to inject arbitrary web script or HTML via the (1) to or (2) from parameters.
Affected packages (1)
- Debian/fexfrom 0, < 20120215-1