Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2022/01/07 12:00 a.m.•43 views

Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS1.8AI score0.00775EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/07 12:00 a.m.•95 views

GHSA-RWQQ-P4P9-5WPQ Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS5.9AI score0.00775EPSS
SaveExploits1References3
Veracode
Veracode
•added 2021/12/20 3:39 a.m.•23 views

Cross-Site Scripting (XSS)

gaoming13/wechat-php-sdk is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in serve function in 'Wechat.php', allowing an attacker to inject and execute malicious script...

6.1CVSS2.9AI score0.00775EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2021/12/17 1:15 p.m.•31 views

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS0.00775EPSS
SaveExploits1References2
CVE
CVE
•added 2021/12/17 12:49 p.m.•85 views

CVE-2021-43678

CVE-2021-43678 affects the PHP package wechat-php-sdk v1.10.2, with the vulnerability located in the Wechat.php file. Multiple connected advisories describe a Cross Site Scripting (XSS) vulnerability arising from insufficient sanitization, notably in the serve() function cited by Veracode. Exploi...

6.1CVSS5.9AI score0.00775EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/12/17 12:49 p.m.•3 views

CVE-2021-43678

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS0.00775EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•8 views

CVE-2021-43678: Improper Neutralization of Input During Web Page Generation

Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting XSS vulnerability in Wechat.php...

6.1CVSS5.8AI score0.00775EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/17 12:00 a.m.•2 views

PT-2021-23906

Name of the Vulnerable Software and Affected Versions: Wechat-php-sdk version 1.10.2 Description: The issue is a Cross Site Scripting XSS vulnerability in Wechat.php. Recommendations: For Wechat-php-sdk version 1.10.2, update to a version that fixes the XSS vulnerability in Wechat.php...

6.1CVSS0.00775EPSS
SaveExploits1References7
Rows per page
Query Builder