7

Could there exist some site that is vulnerable in this way? Sure, obviously. If the server takes the user-supplied file name and tries to emit it, unescaped, into the document, you'll get XSS. Same as any other user-supplied data. Is the particular site you're looking at, or indeed any site on the whole Internet right now, vulnerable? We have no way to know ...


Only top voted, non community-wiki answers of a minimum length are eligible