Lucene search
+L

3 matches found

OSV
OSV
•added 2022/03/26 12:15 a.m.•35 views

GHSA-PHRQ-V4Q2-HMQ6 Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS9.8AI score0.49797EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
•added 2022/03/26 12:15 a.m.•50 views

Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS9.6AI score0.49797EPSS
SaveExploits4References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•3 views

CVE-2020-13756: Improper Control of Generation of Code

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS8.7AI score0.49797EPSS
SaveExploits4References2
Rows per page
Query Builder