Search for packages
| purl | pkg:composer/icecoder/icecoder@8.1.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-76uc-xd9r-f3gz
Aliases: CVE-2024-41373 GHSA-x38c-v778-w56m |
ICEcoder Path Traversal vulnerability ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php. | There are no reported fixed by versions. |
|
VCID-7dkz-eu2g-gyhe
Aliases: CVE-2024-41374 GHSA-xcr9-pm5w-gvh2 |
ICEcoder vulnerable to Cross Site Scripting ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php | There are no reported fixed by versions. |
|
VCID-bvd2-qk4w-bkda
Aliases: CVE-2022-34026 GHSA-fvf5-xp83-vrqp |
ICEcoder vulnerable to Path Traversal ICEcoder v8.1 allows attackers to execute a directory traversal. | There are no reported fixed by versions. |
|
VCID-dk9u-m4au-3kgq
Aliases: CVE-2024-41375 GHSA-5j47-3m62-7vr3 |
ICEcoder vulnerable to Cross Site Scripting ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php | There are no reported fixed by versions. |
|
VCID-z19c-88s1-s7bt
Aliases: CVE-2021-3862 GHSA-73q9-7pwj-gm46 |
icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||