Description
KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATH_INFO.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | kumbiaphp/kumbiapp | <= 1.1.1 | — | GHSA-x6gq-vr59-4q5q |
Medium · 5.4
CVE-2020-14146
EUVD-2022-5727GHSA-x6gq-vr59-4q5q
KumbiaPHP Cross-site Scripting
Published Jun 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre