GHSA-q6v4-xjp2-8ggvMediumCVSS 6.1

Securimage HTML Injection

Published
May 13, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2017-14077 →

📋 Description

HTML Injection in Securimage prior to 3.6.6 allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.

🎯 Affected products1

  • composer/dapphp/securimage:< 3.6.6

🔗 References (5)