Moderate severityNVD Advisory· Published Dec 26, 2022· Updated Apr 14, 2025
CVE-2021-30134
CVE-2021-30134
Description
php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
php-mod/curlPackagist | < 2.3.2 | 2.3.2 |
Affected products
2- php-mod/curldescription
Patches
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
4News mentions
0No linked articles in our index yet.