Packagist (Composer) package
verbb/image-resizer
pkg:composer/verbb/image-resizer
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-13459 | Med | 5.4 | < 2.0.9 | 2.0.9 | May 25, 2020 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action. | |
| CVE-2020-13458 | Hig | 8.8 | < 2.0.9 | 2.0.9 | May 25, 2020 | An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action. |
- affected < 2.0.9fixed 2.0.9
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
- affected < 2.0.9fixed 2.0.9
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action.