{
"id": "GHSA-jf9v-q8vh-3fmc",
"aliases": [
"CVE-2021-32106"
],
"details": "In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.",
"summary": "Cross-site scripting in ICEcoder",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "8.1"
}
]
}
],
"package": {
"name": "icecoder/icecoder",
"ecosystem": "Packagist"
},
"database_specific": {
"last_known_affected_version_range": "<= 8.0"
}
}
],
"modified": "2021-09-09T14:17:19Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"published": "2021-09-09T17:11:11Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32106",
"type": "ADVISORY"
},
{
"url": "https://github.com/icecoder/ICEcoder/commit/21d6ae0f2a3fce7d076ae430d48f5df56bd0f256",
"type": "WEB"
},
{
"url": "https://github.com/icecoder/ICEcoder",
"type": "PACKAGE"
},
{
"url": "https://groups.google.com/g/icecoder/c/xcAc8_1UPxQ",
"type": "WEB"
},
{
"url": "https://prophaze.com/cve/icecoder-8-0-multipe-results-php-replace-cross-site-scripting",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": "2021-06-08T13:15:00Z",
"github_reviewed_at": "2021-06-10T14:32:36Z"
}
}