-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpservermon/phpservermon | composer | <= 3.2.0 | 3.3.0 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability exists in PHPMailer's test script included with PHP Server Monitor. The commit diff shows this script was removed/renamed in patched versions. The test script's parameters are reflected in HTML output without proper sanitization (no visible use of htmlspecialchars or equivalent). This matches the XSS pattern described in CWE-79 where user input is directly embedded in generated web pages.
Ongoing coverage of React2Shell