Skip to content
OpenAdvisories

Package · Packagist

icecoder/icecoder

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 6.1
    CVE-2024-41375

    ICEcoder vulnerable to Cross Site Scripting

    ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php

    icecoder/icecoder Packagist
  • Medium 6.3
    CVE-2024-41373

    ICEcoder Path Traversal vulnerability

    ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.

    icecoder/icecoder Packagist
  • Medium 6.1
    CVE-2024-41374

    ICEcoder vulnerable to Cross Site Scripting

    ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php

    icecoder/icecoder Packagist
  • High 7.5
    CVE-2022-34026

    ICEcoder vulnerable to Path Traversal

    ICEcoder v8.1 allows attackers to execute a directory traversal.

    icecoder/icecoder Packagist
  • Medium 5.4
    CVE-2021-3862

    Cross-site Scripting (XSS) - Reflected in icecoder/icecoder

    icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    ICEcoder icecoder/icecoder icecoder/icecoder Packagist
  • Medium 5.4
    CVE-2021-32106

    Cross-site scripting in ICEcoder

    In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.

    icecoder/icecoder Packagist