CVE-2020-15885
1 advisory.
Packagist/munkireport/comment CVE-2020-15885: medium 5.4, EPSS 0.94%
MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment
Action: Upgrade munkireport/comment to 4.0 or later.
composer require munkireport/comment:4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0 | - |
Fixed versions
| 4.0 |
Sources
- osv: GHSA-vc4f-2g7f-pmqr
- https://nvd.nist.gov/vuln/detail/CVE-2020-15885
- https://github.com/munkireport/comment/commit/ee4c1cd28fdcb42eb24c0cfea24ddf02478f9869
- https://github.com/munkireport/comment
- https://github.com/munkireport/comment/releases
- https://github.com/munkireport/munkireport-php
- https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3
- https://github.com/munkireport/munkireport-php/wiki/20200722--XSS-Filter-Bypass-On-Comments
CVE-2020-15885 · published · modified · JSON