CVE-2022-4524
1 advisory.
Packagist/roots/soil CVE-2022-4524: medium 6.1, EPSS 0.59%
Roots Soil plugin vulnerable to Cross-site Scripting
Action: Upgrade roots/soil to 4.1.0 or later.
composer require roots/soil:4.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.0 | - |
Fixed versions
| 4.1.0 |
Sources
- osv: GHSA-jw6x-4h8h-569x
- https://nvd.nist.gov/vuln/detail/CVE-2022-4524
- https://github.com/roots/soil/pull/285
- https://github.com/roots/soil/commit/0c9151e00ab047da253e5cdbfccb204dd423269d
- https://github.com/roots/soil
- https://github.com/roots/soil/releases/tag/4.1.0
- https://github.com/roots/soil/releases/tag/4.1.1
- https://vuldb.com/?id.215904
CVE-2022-4524 · published · modified · JSON