jquery-file-upload (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package jquery-file-upload, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2018-9207 — CVSS 9.8 (critical): Arbitrary file upload in jQuery Upload File <= 4.0.2
• CVE-2021-37504 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary…