Laravel framework susceptible to reflected cross-site scripting

🗓️ 10 Mar 2025 12:30:55Reported by GitHub Advisory DatabaseType

Laravel framework versions 11.9.0 to 11.35.1 vulnerable to reflected cross-site scripting issue.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-13918	10 Mar 202510:39	–	circl
CNNVD	Laravel Framework 跨站脚本漏洞	10 Mar 202500:00	–	cnnvd
CVE	CVE-2024-13918	10 Mar 202510:02	–	cve
Cvelist	CVE-2024-13918 Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page	10 Mar 202510:02	–	cvelist
Debian CVE	CVE-2024-13918	10 Mar 202510:02	–	debiancve
EUVD	EUVD-2024-54196	3 Oct 202520:07	–	euvd
Friends Of PHP	Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page	13 Dec 202415:51	–	friendsofphp
NVD	CVE-2024-13918	10 Mar 202510:15	–	nvd
OSV	GHSA-546H-56QP-8JMW Laravel framework susceptible to reflected cross-site scripting	10 Mar 202512:30	–	osv
Positive Technologies	PT-2025-10571 · Laravel +1 · Laravel +1	10 Mar 202500:00	–	ptsecurity

Vulners

Node

laravel frameworkRange11.9.0–11.36.0composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-13918
github	www.github.com/laravel/framework/pull/53869
github	www.github.com/laravel/framework/releases/tag/v11.36.0
github	www.github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page
openwall	www.openwall.com/lists/oss-security/2025/03/10/3
github	www.github.com/laravel/framework/commit/45287fb2a91c69bb1c110539b9b7341faf5aee33
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2024-13918.yaml
github	www.github.com/advisories/GHSA-546h-56qp-8jmw

11 Mar 2025 14:31Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1 - 8

EPSS0.01054

SSVC