CVE-2018-25080

Packagist/mobiledetect/mobiledetectlib CVE-2018-25080: medium 6.1, EPSS 2.66%

Cross-site Scripting in MobileDetect

Action: Upgrade mobiledetect/mobiledetectlib to 2.8.32 or later.

composer require mobiledetect/mobiledetectlib:2.8.32

Affected

Fixed versions

Sources

• osv: GHSA-r77c-qv68-j3pp
• https://nvd.nist.gov/vuln/detail/CVE-2018-25080
• https://github.com/serbanghita/Mobile-Detect/pull/741
• https://github.com/serbanghita/Mobile-Detect/commit/31818a441b095bdc4838602dbb17b8377d1e5cce
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2018-25080.md
• https://github.com/serbanghita/Mobile-Detect
• https://github.com/serbanghita/Mobile-Detect/releases/tag/2.8.32
• https://vuldb.com/?ctiid.220061
• https://vuldb.com/?id.220061

CVE-2018-25080 · published 2023-02-04T09:30:21Z · modified 2025-04-16T16:30:45.663323Z · JSON