Skip to content
OpenAdvisories

Package · Packagist

verbb/image-resizer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2020-13458

    Image Resizer Cross-Site Request Forgery (CSRF)

    An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action.

    verbb/image-resizer Packagist
  • Medium 5.4
    CVE-2020-13459

    Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action

    An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.

    verbb/image-resizer Packagist