{"id":"GHSA-ww6p-q26w-fr6m","aliases":[],"title":"phpxmlrpc/extra XSS in class documenting_xmlrpc_server","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Versions preceding 0.6.1 of the phpxmlrpc/extras project are susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability exists within the class documenting_xmlrpc_server when processing the GET methodName parameter.","severity":"medium","score":6.1,"published":"2024-05-20T17:14:55.000Z","modified":"2024-12-05T05:39:46.155Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpxmlrpc/extras","sources":[{"name":"OSV · GHSA-ww6p-q26w-fr6m","url":"https://osv.dev/vulnerability/GHSA-ww6p-q26w-fr6m"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.6.1"}],"type":"ECOSYSTEM"}],"versions":["0.5.1","0.5.2","0.6.0"],"fixed":["0.6.1"]}],"sourceAffected":[],"references":["https://github.com/gggeek/phpxmlrpc-extras/commit/65c336e3def9ce71b3e799104d3a6ad15668ddb0","https://github.com/FriendsOfPHP/security-advisories/blob/master/phpxmlrpc/extras/2017-10-29.yaml","https://github.com/gggeek/phpxmlrpc-extras","https://github.com/gggeek/phpxmlrpc-extras/releases/tag/0.6.1"],"sources":[{"name":"OSV","id":"GHSA-ww6p-q26w-fr6m","modified":"2024-12-05T05:39:46.155431Z","url":"https://osv.dev/vulnerability/GHSA-ww6p-q26w-fr6m"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1}],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T22:15:33.378Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}