← All advisories

Medium severity6.1NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-16880

CVE-2017-16880

Description

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
filp/whoopsPackagist	< 2.1.13	2.1.13

Affected products

2

ghsa-coords
pkg:composer/filp/whoops
Range: < 2.1.13
Whoops Project/Whoops
cpe:2.3:a:whoops_project:whoops:*:*:*:*:*:*:*:*
Range: <2.1.13

Patches

Vulnerability mechanics

References

3

github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291anvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-2jjm-6whx-p8w4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-16880ghsaADVISORY

News mentions

0

No linked articles in our index yet.