Cross-site scripting in demos/demo.mysqli.php in getID3

보통 6.1CVE-2021-40926 · GHSA-x2gw-85w6-fjjw · Published 01/10/2021 · updated 17/06/2026

요약

CVE-2021-40926은(는) james-heinrich/getid3, getid3 (getid3)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.0%, 전체 취약점의 63.1%보다 높음.
조치: 1.9.21, 2.0.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
james-heinrich/getid3 Packagist	`≥ 1.0.0, < 1.9.21`	`1.9.21`
getid3 getid3	`= 2.0.0≥ 1.9.0, < 2.0.0`	`2.0.0`

Description

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

NVD description

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

References

nvd.nist.gov/vuln/detail/CVE-2021-40926 · ADVISORY
JamesHeinrich/getID3 · WEB
JamesHeinrich/getID3#342 · WEB
JamesHeinrich/getID3 · PACKAGE
JamesHeinrich/getID3 release v1.9.21 · WEB

james-heinrich/getid3의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free