Beveiligingsadvies

CVE-2026-6735

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-10 03:27:00

Laatst bijgewerkt 2026-05-11 13:25:54

Toegewezen door php

CVSS-score 7.3

Status PUBLISHED

Beschrijving

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.

← Alle CVE's bekijken Bekijk op cve.org ↗