{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.1"}],"component":"pekeupload","cve_ids":["CVE-2021-23673"],"ecosystem":"npm","epss":0.00847,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-89q5-mj78-pw5w","id":"tcs_01M5KFCFRV9CRBVM24VNP5NKZ5","modified_at":"2026-03-13T22:10:57.052218Z","published_at":"2021-12-02T17:52:26Z","references":["https://osv.dev/vulnerability/GHSA-89q5-mj78-pw5w","https://nvd.nist.gov/vuln/detail/CVE-2021-23673","https://github.com/moxiecode/plupload","https://github.com/moxiecode/plupload/blob/120cc0b5dd3373d7181fd11b06ac2557c890d3f0/js/jquery.plupload.queue/jquery.plupload.queue.js%23L226","https://snyk.io/vuln/SNYK-JS-PEKEUPLOAD-1584360"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-89q5-mj78-pw5w","url":"https://osv.dev/vulnerability/GHSA-89q5-mj78-pw5w"}],"summary":"Cross-site Scripting in pekeupload"}