CVE-2021-40926

Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...

CVE-2021-40926

CVE-2021-40926 is an XSS vulnerability in the GetID3 project. Affects demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta, where the showtagfiles parameter may be abused to inject arbitrary script/HTML. Descriptions across multiple registries (NVD, OSV, GHSA, UBUNTU, Nessus) confirm the issue but...

CVE-2021-40926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...

PT-2021-23014

Name of the Vulnerable Software and Affected Versions getID3 versions 1.X through 2.0.0-beta Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter in demos/demo.mysqli.php. This enables attackers to execute...