~ / search / GHSA-f8p3-q834-q9cj

GHSA-f8p3-q834-q9cj

php-mod/curl allows Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-30134

Packages

EcosystemPackageAffectedFixed in
Packagist php-mod/curl < 2.3.2 2.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the `post_file_path_upload.php` key parameter and the POST data to `post_multidimensional.php`.

References

External links from the advisory. They lead to third-party sites.