CVE-2007-3498
1 advisory.
Packagist/ezyang/htmlpurifier CVE-2007-3498: medium 6.1
HTML Purifier Cross-site Scripting vulnerability
Action: Upgrade ezyang/htmlpurifier to 2.0.1 or later.
composer require ezyang/htmlpurifier:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-6fh7-fwqj-mv49
- https://nvd.nist.gov/vuln/detail/CVE-2007-3498
- https://github.com/ezyang/htmlpurifier/commit/96b571d23639bd70768b8db626ecaf8bbb7ca5a3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35300
- https://github.com/ezyang/htmlpurifier
- https://github.com/ezyang/htmlpurifier/commits/v2.0.1/smoketests/configForm.php
- https://web.archive.org/web/20200228110020/http://www.securityfocus.com/bid/24699
- http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS
CVE-2007-3498 · published · modified · JSON