CRITICAL9.8Packagist
GHSA-2gc7-w4hw-rr2m· CVE-2019-19634class.upload.php in verot.net omits .pht from the set of dangerous file extensions
Modified: 7/21/2026
package
pkg:packagist/verot/class.upload.php
class.upload.php in verot.net omits .pht from the set of dangerous file extensions
Modified: 7/21/2026
Remote code execution in verot/class.upload.php
Modified: 7/21/2026
class.upload.php allows cross-site scripting attacks via uploaded files
Modified: 2/16/2024