Packagist/ezyang/htmlpurifier CVE-2010-2479: medium, EPSS 2.01%
HTML Purifier Cross-site Scripting (XSS) vulnerability
Action: Upgrade ezyang/htmlpurifier to 4.1.1 or later.
composer require ezyang/htmlpurifier:4.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.1 | - |
Fixed versions
| 4.1.1 |
Sources
- osv: GHSA-6rm6-mjmh-86jq
- https://nvd.nist.gov/vuln/detail/CVE-2010-2479
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezyang/htmlpurifier/CVE-2010-2479.yaml
- https://github.com/ezyang/htmlpurifier
- http://htmlpurifier.org/news/2010/0531-4.1.1-released
- http://repo.or.cz/w/htmlpurifier.git/commitdiff/18e538317a877a0509ae71a860429c41770da230
- http://secunia.com/advisories/39613
- http://secunia.com/advisories/40431
- http://wiki.mahara.org/Release_Notes/1.0.15
- http://wiki.mahara.org/Release_Notes/1.1.9
- http://wiki.mahara.org/Release_Notes/1.2.5
- http://www.securityfocus.com/bid/41259
CVE-2010-2479 · published · modified · JSON