Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2025/07/25 6:30 p.m.•22 views

Withdrawn Advisory: CodeIgniter4 Cross-Site Scripting Vulnerability in debugbar_time Parameter

Withdrawn Advisory This advisory has been withdrawn because the original report was found to be invalid. This link is maintained to preserve external references. For more information, see https://github.com/github/advisory-database/pull/5862. Original Description A stored cross-site scripting XSS...

6.1CVSS5.2AI score0.00331EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2025/07/25 6:30 p.m.•15 views

GHSA-49JM-G4M8-X53P Withdrawn Advisory: CodeIgniter4 Cross-Site Scripting Vulnerability in debugbar_time Parameter

Withdrawn Advisory This advisory has been withdrawn because the original report was found to be invalid. This link is maintained to preserve external references. For more information, see https://github.com/github/advisory-database/pull/5862. Original Description A stored cross-site scripting XSS...

6.1CVSS7AI score0.00331EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•1 views

CVE-2025-45406: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in CodeIgniter4 v4.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the debugbartime parameter. NOTE: this is disputed by the Supplier because attackers cannot influence the value of debugbartime, and...

6.1CVSS6.1AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder