CVE-2024-43407: Contrib Cssgen Php Cwe 79 Cve 2024 43407

Legacy third-party library script uses input from global arrays to initialize GeSHi without sanitization, which can lead to Cross-Site Scripting (XSS).

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0

PHP^β

greprules fetch cve-2024-43407-contrib-cssgen-php-cwe-79-cve-2024-43407 --engine opengrep

Description

Legacy third-party library script uses input from global arrays to initialize GeSHi without sanitization, which can lead to Cross-Site Scripting (XSS).

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 145 downloads
0 direct145 via packs
· 0 stars · Quality score 61How quality works
Included packs: 2 packs

Community feedback

0 signals from signed-in users.

Useful: 0
False positive: 0
Metadata: 0