Medium severity6.1NVD Advisory· Published Nov 17, 2017· Updated May 13, 2026
CVE-2017-16880
CVE-2017-16880
Description
The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
filp/whoopsPackagist | < 2.1.13 | 2.1.13 |
Affected products
1Patches
1c16791d28d1cTemplateHelper: fix XSS if Symfony dumper is not available
1 file changed · +1 −1
src/Whoops/Util/TemplateHelper.php+1 −1 modified@@ -183,7 +183,7 @@ public function dump($value) return $output; } - return print_r($value, true); + return htmlspecialchars(print_r($value, true)); } /**
Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
3- github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291anvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-2jjm-6whx-p8w4ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-16880ghsaADVISORY
News mentions
0No linked articles in our index yet.