Description
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | helloxz/imgurl | <= 2.31 | — | GHSA-f2rp-j8hv-g5gx |
Medium · 5.4
CVE-2021-38713
EUVD-2021-1690GHSA-f2rp-j8hv-g5gx
Cross-site scripting in imgURL
Published Aug 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre