Medium severity6.1NVD Advisory· Published Dec 1, 2018· Updated Jun 17, 2026
CVE-2018-19785
CVE-2018-19785
Description
PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
athlon1600/php-proxy-appPackagist | < 3.0 | 3.0 |
Affected products
1Patches
Vulnerability mechanics
References
5- github.com/Athlon1600/php-proxy-app/issues/140nvdExploitThird Party AdvisoryWEB
- github.com/eddietcc/CVEnotes/blob/master/PHP-Proxy/RADME.mdnvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-cghj-w42g-hqmrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-19785ghsaADVISORY
- github.com/Athlon1600/php-proxy-app/commit/f74d9315ded7c05030023efcbedbcb24e8cc3a64ghsaWEB
News mentions
0No linked articles in our index yet.