GCVE - cpe:2.3:a:avatar_uploader_project:avatar_uploader:7.0-1.0:beta8:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:avatar_uploader_project:avatar_uploader:7.0-1.0:beta8:*:*:*:*:*:*

part: a version: 7.0-1.0 update: beta8

Vendor	Avatar Uploader Project (`8b72790c-abfe-5323-afad-f65b5c0e4224`)
Product	Avatar Uploader (`77d212eb-2ca2-598d-b475-c9f8917bcc9b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-50957`	vulnerable	2026-06-08 05:52:03.779732	Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS MEDIUM (6.1) Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the file parameter. Attackers can craft URLs with script payloads in the file parameter of avatar_uploader.pages.inc to execute arbitrary JavaScript in victim browsers. Published: 2026-05-10T12:12:52.170Z Updated: 2026-05-26T11:51:46.398Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/50841 https://www.drupal.org/project/avatar_uploader https://www.vulncheck.com/advisories/drupal-avatar-uploader-7-x-beta8-reflected-xss	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.