CVE-2021-32106
CVE-2021-32106
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.
CVSS 5.4 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
icecoder/icecoder Packagist
- Versions
- 8.0
- Affected ranges
- ECOSYSTEM: < 8.1
Update to 8.1