XSS in PHP-Proxy-App through v3.0

MEDIUM 6.1CVE-2018-19785 · GHSA-cghj-w42g-hqmr · Published 01/12/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
athlon1600/php-proxy-app Packagist	`< 3.0`	`3.0`
php-proxy php-proxy	`≤ 5.1.0`	No fix yet

Description

PHP-Proxy-App through 3.0 has Cross-Site Scripting (XSS) via the URL field in index.php.

NVD description

PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.