JamesHeinrich/getID3

Releases25

Frequency6 months 1 week

Last Release 3 months ago

Stars1.23K

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-40926 ↗	Oct 1, 2021Friday, 1 October 2021, 16:15	6.1 MEDIUM	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.