VDB
Sign up
MEDIUM5.4

GHSA-f2rp-j8hv-g5gx

Cross-site scripting in imgURL

Details

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/helloxz/imgurl
Introduced in: 0

No fixed version published yet for helloxz/imgurl (composer). Pin to a known-safe version or switch to an alternative.

References