Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-pskc-ec8x-wyc2
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CodeIgniter4 is the branch of CodeIgniter, a PHP full-stack web framework. A cross-site scripting (XSS) vulnerability was found in `API\ResponseTrait` in Codeigniter4 Attackers can do XSS attacks if a potential victim is using `API\ResponseTrait`. contains a patch for this vulnerability. There are two potential workarounds available. Users may avoid using `API\ResponseTrait` or `ResourceController` Users may also disable Auto Route and use defined routes only.
|
CVE-2022-21715
GHSA-7528-7jg5-6g62
|