An issue was discovered in Jirafeau before 3.4.1. The \search file by hash\ form is affected by reflected XSS that could allow by targeting an administrator stealing a session and gaining administrative privileges.