PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.Referenceshttps://github.com/xiebruce/PicUploader/issues/80