phpxmlrpc/extras vulnerabilities

Latest phpxmlrpc/extras CVEs

Newest publication first

1. GHSA-ww6p-q26w-fr6m phpxmlrpc/extra XSS in class documenting_xmlrpc_server

   Published 2024-05-20

   Medium·CVSS 6.1

   Versions preceding 0.6.1 of the phpxmlrpc/extras project are susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability exists within the class documenting_xmlrpc_server when processing the GET methodName parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.