{"id":"GHSA-p7rm-gh9g-5fr8","aliases":["CVE-2020-13459"],"title":"Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.","severity":"medium","score":5.4,"published":"2022-05-24T17:18:39.000Z","modified":"2024-04-24T17:57:36.654Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"verbb/image-resizer","sources":[{"name":"OSV · GHSA-p7rm-gh9g-5fr8","url":"https://osv.dev/vulnerability/GHSA-p7rm-gh9g-5fr8"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.0.9"}],"type":"ECOSYSTEM"}],"versions":["2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8"],"fixed":["2.0.9"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2020-13459","https://github.com/verbb/image-resizer","https://github.com/verbb/image-resizer/blob/craft-3/CHANGELOG.md"],"sources":[{"name":"OSV","id":"GHSA-p7rm-gh9g-5fr8","modified":"2024-04-24T17:57:36.654955Z","url":"https://osv.dev/vulnerability/GHSA-p7rm-gh9g-5fr8"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T09:15:31.408Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}