The Jquery File Upload Project maintains a widely embedded client-side file-upload component that, despite a narrow product scope, appears across many web applications as a third-party library integration. The durable signal centers on the upload-handling mechanism itself, with the recurring weakness class of unrestricted file-type acceptance reflecting the inherent risk of permitting user-supplied file operations without strict validation. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Jquery File Upload Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-9206CRITICAL Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 | Oct 11, 2018 | 9.8 | 94 | NO | YES |
CVE-2014-8739CRITICAL Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (f | Feb 8, 2020 | 9.8 | 91 | NO | YES |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Jquery File Upload Project.
Media articles that mention a CVE ID that affects a product developed by Jquery File Upload Project — matched by CVE ID, not by vendor name.