2 matches found
CVE-2021-38713
imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.
CVE-2022-29305
imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.