cross-site scripting (xss) via file upload

Cross-site scripting (XSS) via file upload refers to a security vulnerability where an attacker exploits a web application's file upload functionality to inject and execute malicious code on a different website or a user's browser. The attacker uploads a file containing malicious script code, which is then executed on the target site, potentially allowing them to steal sensitive information or gain unauthorized access.

Requires login.