Sunhater Kcfinder vulnerabilities

• sunhater kcfinder uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles... CVE-2018-25002 8.8 HighDecember 31, 2020
• sunhater kcfinder SunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php CVE-2019-14315 6.1 MediumJuly 28, 2019
• sunhater kcfinder Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier... CVE-2014-3988 4.3 MediumDecember 3, 2014