EUVD-2022-7617

🗓️ 26 Dec 2022 00:00:00Reported by EUVDType

euvd🔗 euvdservices.enisa.europa.eu👁 8 Views

php-mod/curl before 2.3.2 allows XSS via post_file_path_upload.php key and POST data vulnerability

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2021-30134	14 Apr 202518:54	–	circl
CNNVD	WordPress Plugin php-mod/curl 跨站脚本漏洞	26 Dec 202200:00	–	cnnvd
CVE	CVE-2021-30134	26 Dec 202200:00	–	cve
Cvelist	CVE-2021-30134	26 Dec 202200:00	–	cvelist
Github Security Blog	php-mod/curl allows Cross-site Scripting	26 Dec 202209:30	–	github
Nuclei	Php-mod/curl Library <2.3.2 - Cross-Site Scripting	9 Jun 202605:43	–	nuclei
NVD	CVE-2021-30134	26 Dec 202207:15	–	nvd
OSV	GHSA-F8P3-Q834-Q9CJ php-mod/curl allows Cross-site Scripting	26 Dec 202209:30	–	osv
Patchstack	WordPress Teamleader CRM Forms plugin <= 2.0.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability	16 Apr 202100:00	–	patchstack
Patchstack	WordPress HT Slider Range for Amazon affiliates plugin <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability	16 Apr 202100:00	–	patchstack

[
  {
    "enisaIdVendor": [
      {
        "id": "c3672745-4def-3cfa-bc91-0e612f2c16eb",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a2ce2b08-f2c9-36a0-849f-212ba202f12b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-30134
github	www.github.com/php-mod/curl/commit/0bddefe8bbd292065f23dd6e24d2c745c4865cf7
github	www.github.com/php-mod/curl
wpscan	www.wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7

14 Apr 2025 18:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.1

EPSS0.01803

SSVC