PT-2026-62090 · Undefined · Undefined

CVE-2026-52475 · Published 2026-07-21 · Updated 2026-07-21

Mitre

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-52475

Affected Products

Undefined

References · 2

• 🔥 https://github.com/Y4y17/CVE/blob/main/AiFlowy/Any%20file%20upload%20vulnerability.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-52475 · Security Note