| Package | Affected versions | Patched versions |
|---|---|---|
| james-heinrich/getid3 | ≥ 1.0.0, < 1.9.21 | 1.9.21 |
| getid3 | = 2.0.0≥ 1.9.0, < 2.0.0 | 2.0.0 |
Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free