{ "id": "CVE-2024-34909", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-15T20:15:13.570", "lastModified": "2024-05-15T20:15:13.570", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "An arbitrary file upload vulnerability in KYKMS v1.0.1 and below allows attackers to execute arbitrary code via uploading a crafted PDF file." } ], "metrics": {}, "references": [ { "url": "https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/KYKMS_Cross_site%20_scripting%20_vulnerability", "source": "cve@mitre.org" } ] }