Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/03/26 12:15 a.m.46 views

Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS9.6AI score0.55084EPSS
SaveExploits4References9Affected Software1
OSV
OSV
added 2022/03/26 12:15 a.m.21 views

GHSA-PHRQ-V4Q2-HMQ6 Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

9.8CVSS9.8AI score0.55084EPSS
SaveExploits4References8
Rows per page
Query Builder