Lucene search
+L

10 matches found

Nuclei
Nuclei
•added 2026/10/16 2:05 a.m.•123 views

Php-mod/curl Library <2.3.2 - Cross-Site Scripting

Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...

6.1CVSS6.1AI score0.01275EPSS
SaveExploits3References3
VulnCheck KEV
VulnCheck KEV
•added 2026/09/21 12:00 a.m.•13 views

VulnCheck KEV: CVE-2021-30134

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

6.1CVSS6.3AI score0.01275EPSS
SaveIn wildExploits3References6
osv_ghsa
osv_ghsa
•added 2022/12/26 9:30 a.m.•121 views

GHSA-F8P3-Q834-Q9CJ php-mod/curl allows Cross-site Scripting

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

6.1CVSS5.9AI score0.01275EPSS
SaveExploits3References4
Mend
Mend
•added 2022/12/26 12:00 a.m.•6 views

CVE-2021-30134

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

6.1CVSS0.01275EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•5 views

CVE-2021-30134: Improper Neutralization of Input During Web Page Generation

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

6.1CVSS5.8AI score0.01275EPSS
SaveExploits3References3
CNNVD
CNNVD
•added 2022/12/26 12:00 a.m.•51 views

WordPress Plugin php-mod/curl 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.2AI score0.01275EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2022/12/26 12:00 a.m.•14 views

CVE-2021-30134

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

5.8AI score0.01275EPSS
SaveExploits3References1
CVE
CVE
•added 2022/12/26 12:00 a.m.•150 views

CVE-2021-30134

The php-mod/curl library (a wrapper of the PHP cURL extension) versions prior to 2.3.2 are vulnerable to Cross-Site Scripting (XSS) . This flaw occurs via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php. An attacker can inject arbitrary scripts, potentia...

6.1CVSS5.9AI score0.01275EPSS
SaveIn wildExploits3References1Affected Software1
EUVD
EUVD
•added 2022/12/26 12:00 a.m.•41 views

EUVD-2022-7617

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

6.1CVSS5.9AI score0.01275EPSS
SaveExploits3References4
wpexploit
wpexploit
•added 2021/04/16 12:00 a.m.•998 views

Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)

The original submission stated that the HT Slider Range for Amazon affiliates plugin for WordPress had a reflected XSS vulnerability. After investigation WPScanTeam, the cause was found to be test files from the php-mod/curl library, which was missing appropriate response headers before outputtin...

0.1AI score0.01275EPSS
SaveExploits3References1
Rows per page
Query Builder