VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 1, 2021· Updated Jun 17, 2026

CVE-2021-40926

CVE-2021-40926

Description

Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
james-heinrich/getid3Packagist
>= 1.0.0, < 1.9.211.9.21

Affected products

4
  • getID3/getID3description
  • ghsa-coords
    pkg:composer/james-heinrich/getid3
    Range: >= 1.0.0, < 1.9.21
  • Getid3/Getid32 versions
    cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:getid3:getid3:*:*:*:*:*:*:*:*range: >=1.9.0,<2.0.0
    • cpe:2.3:a:getid3:getid3:2.0.0:beta:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.