CVE-2021-45895
1 advisory.
Packagist/netgen/tagsbundle CVE-2021-45895: medium 6.1, EPSS 0.70%
Cross-site Scripting in Netgen Tags Bundle
Action: Upgrade netgen/tagsbundle to 3.4.11 or later.
composer require netgen/tagsbundle:3.4.11composer require netgen/tagsbundle:4.0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.4.11 | - |
| 4.0.0 | 4.0.15 | - |
Fixed versions
| 3.4.11 | 4.0.15 |
Sources
- osv: GHSA-xvvv-wj7j-r9jm
- https://nvd.nist.gov/vuln/detail/CVE-2021-45895
- https://github.com/netgen/TagsBundle
- https://github.com/netgen/TagsBundle/releases/tag/3.4.11
- https://github.com/netgen/TagsBundle/releases/tag/4.0.15
CVE-2021-45895 · published · modified · JSON