CVE-2021-38713: Cross-site scripting in imgURL – CVSS 5.4 · Watchpost

← All vulnerabilities

Cross-site scripting in imgURL

中危 5.4CVE-2021-38713 · GHSA-f2rp-j8hv-g5gx · Published 16/08/2021 · updated 17/06/2026

要点

CVE-2021-38713 是影响 helloxz/imgurl, imgurl (imgurl project) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.53%，高于 44.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
helloxz/imgurl Packagist	`≤ 2.31`	No fix yet
imgurl imgurl_project	`= 2.31`	No fix yet

Description

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

NVD description

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

References

nvd.nist.gov/vuln/detail/CVE-2021-38713 · ADVISORY
helloxz/imgurl · WEB
helloxz/imgurl · PACKAGE

helloxz/imgurl 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free