Skip to content
OpenAdvisories

Package · Packagist

ipl/web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.6
    CVE-2026-42224

    ipl/web is vulnerable to reflected XSS by malformed search requests

    ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim needs to visit a sp…

    Icinga ipl-web ipl/web Packagist
  • Low 3.9
    CVE-2024-41811

    ipl/web susceptible to Cross-Site Request Forgery (CSRF)

    ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffected by this once `ic…

    Icinga ipl-web ipl/web icinga-php-library Debian Ubuntu Packagist