GitHub Advisoryadvisory · Packagist
GHSA-pxqj-xrv5-qvjf XML-RPC for PHP's debugger vulnerable to possible XSS attack
MEDIUM
Official page ↗
- Ecosystem
- Packagist
- Packages
- phpxmlrpc/phpxmlrpc
- Severity
- Moderate
- Weaknesses
- CWE-79
- Reviewed
- 2023-01-11
Affected packages
• Packagist phpxmlrpc/phpxmlrpc: < 4.9.2 → fixed in 4.9.2
Description
The bundled xml-rpc debugger is susceptible to XSS attacks.
Since the debugger is not designed to be exposed to end users but only to the developers using this library, and in the default configuration it is not exposed to requests from the web, the likelihood of exploitation may be low.
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness