Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action

MOYENNE 5.4CVE-2020-13459 · GHSA-p7rm-gh9g-5fr8 · Published 25/05/2020 · updated 17/06/2026

En bref

CVE-2020-13459 est une vulnérabilité MOYENNE (CVSS 5.4) touchant verbb/image-resizer, image resizer (verbb).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.54%, plus élevée que 45.4% des vulnérabilités.
Correctif : mettre à jour vers 2.0.9 ou plus récent.

Package	Affected versions	Patched versions
verbb/image-resizer Packagist	`< 2.0.9`	`2.0.9`
image resizer verbb	`< 2.0.9`	`2.0.9`

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.

NVD description

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.