Packagist/verot/class.upload.php — 3 CVEs

CRITICAL9.8CVE-2019-19634class.upload.php in verot.net omits .pht from the set of dangerous file extensions

from 0, <= 1.0.3

CRITICAL9.8CVE-2019-19576Remote code execution in verot/class.upload.php

from 0, < 1.0.3

MEDIUM6.5CVE-2023-6551class.upload.php allows cross-site scripting attacks via uploaded files

from 0, <= 2.1.6

pkg:Packagist/verot/class.upload.php