PT-2024-40395

Name of the Vulnerable Software and Affected Versions FOSRestBundle versions 1.2.0 through 1.2.1 Description The issue arises from incorrect validation of the JSONP callback query parameter name instead of its value, affecting users of the JSONP handler with FOSRestBundle. Recommendations For...

CVE-2021-43697

Workerman-ThinkPHP-Redis last update Mar 16, 2018 is affected by a Cross Site Scripting XSS vulnerability. In file Controller.class.php, the exit function will terminate the script and print the message to the user. The message will contain $GETC'VARJSONPHANDLER' then there is a XSS vulnerability...

PT-2021-5996

Name of the Vulnerable Software and Affected Versions Workerman-ThinkPHP-Redis affected versions not specified Description The issue is related to a Cross Site Scripting XSS vulnerability. In the file Controller.class.php, the exit function will terminate the script and print a message to the use...