Cross-site Scripting (XSS)

mobiledetect/mobiledetectlib is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the initLayoutType functions in sessionexample.php does properly escape the special characters in $SERVER'PHPSELF' before being rendered, allowing an attacker to inject and execute malicious...

CVE-2018-25080: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.31. This issue affects the function initLayoutType of the file examples/sessionexample.php of the component Example. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack...