-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHPMiggo AIRoot Cause AnalysisThe provided information indicates the XSS vulnerability occurs in view/about.php line 53 where the User-Agent header is echoed without sanitization. However, PHP's echo statement in the global scope does not correspond to a named function in runtime profiling. The vulnerability stems from direct output in the script rather than within a specific function. Without access to the actual code structure or patch details showing function-level changes, we cannot definitively identify a named function that would appear in a profiler. The main script execution context ('{main}') isn't a valid function name, and no class/method information is provided in the advisory.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| wwbn/avideo | composer | < 14.3 | 14.3 |
Ongoing coverage of React2Shell