GHSA-x2gw-85w6-fjjwMediumCVSS 6.1

Cross-site scripting in demos/demo.mysqli.php in getID3

Published
October 4, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-40926 →

📋 Description

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

🎯 Affected products1

  • composer/james-heinrich/getid3:>= 1.0.0, < 1.9.21

🔗 References (6)