Medium · 6.1 CVE-2021-45895 EUVD-2022-0749GHSA-xvvv-wj7j-r9jm

Cross-site Scripting in Netgen Tags Bundle

Published Dec 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface.

Ecosystem	Package	Affected	Fixed	Record
Packagist	netgen/tagsbundle	>= 3.4.0, < 3.4.11	3.4.11	GHSA-xvvv-wj7j-r9jm
Packagist	netgen/tagsbundle	>= 4.0.0, < 4.0.15	4.0.15	GHSA-xvvv-wj7j-r9jm