WS-2016-0041 | Mend Vulnerability Database

Vulnerability DatabaseWS-2016-0041

WS-2016-0041

Published:May 19, 2026

Updated:May 19, 2026

In rendr-handlebarsthere are double-escaped data attributes in client side view placeholder that cause a potential XSS attack

Affected Packages

bootstrap-tagsinput (CDN_JS):

Affected version(s) >=0.5.0 <=0.7.1

Fix Suggestion:

Update to version no_fix

bootstrap-tagsinput (NPM):

Affected version(s) >=0.5.0 <=0.7.1

Fix Suggestion:

Update to version no_fix

cmjmvcui (NUGET):

Affected version(s) >=2.0.0 <=2.0.3

Fix Suggestion:

Update to version no_fix

cms.web (NUGET):

Affected version(s) >=0.0.350-unstable <=0.0.351-unstable

Fix Suggestion:

Update to version no_fix

iiki.baseapp.web (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

bnsights.mvc2 (NUGET):

Affected version(s) >=1.1.0 <=1.2.1.126

Fix Suggestion:

Update to version no_fix

tra.eservices.formbuilder (NUGET):

Affected version(s) >=1.0.0 <=1.0.0.1

Fix Suggestion:

Update to version no_fix

gcms.corelibrary (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

albedo.dependencies (NUGET):

Affected version(s) >=1.0.0 <1.1.58

Fix Suggestion:

Update to version 1.1.58

bootstrap-tagsinput (NUGET):

Affected version(s) >=1.0.0 <1.8.1

Fix Suggestion:

Update to version 1.8.1

clientapp.web (NUGET):

Affected version(s) >=1.0.0 <2.0.0.1

Fix Suggestion:

Update to version 2.0.0.1

albedo.portal.dependencies (NUGET):

Affected version(s) >=1.2.1 <=1.3.1

Fix Suggestion:

Update to version no_fix

ramiawadallah/boomvel (PHP):

Affected version(s) >=dev-master <=0.1.x-dev

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.202 <2.1.211

Fix Suggestion:

Update to version 2.1.211

wbe/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

syscover/pulsar (PHP):

Affected version(s) >=v2.0.20 <=2.0.22

Fix Suggestion:

Update to version no_fix

rashidul/river (PHP):

Affected version(s) >=dev-banner_slider_updated <=dev-mamun/21-dec

Fix Suggestion:

Update to version no_fix

life2016/bootstrap-tagsinput (PHP):

Affected version(s) >=dev-master <=1.0

Fix Suggestion:

Update to version no_fix

fadli-dev/treant (PHP):

Affected version(s) >=dev-main <=v1.3

Fix Suggestion:

Update to version no_fix

formelo/cli (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dancesmile/fastadmin (PHP):

Affected version(s) >=1.1.1 <=1.1.9

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.80 <3.0.82

Fix Suggestion:

Update to version 3.0.82

codigu/copya (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-dependabot/composer/composer/composer-1.10.23 <dev-fix_backup_encoding_v2

Fix Suggestion:

Update to version dev-fix_backup_encoding_v2

intelogie/bootstrap-tagsinput (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

madedwi/yii2-admincms (PHP):

Affected version(s) =dev-master <v0

Fix Suggestion:

Update to version v0

skcms/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bretto36/rapyd-laravel (PHP):

Affected version(s) =1.1.x-dev <v1.01

Fix Suggestion:

Update to version v1.01

greenelf/rapyd-laravel (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

skeeks/yii2-tagsinput (PHP):

Affected version(s) =1.1.0

Fix Suggestion:

Update to version no_fix

edutalk-cms/assets-management (PHP):

Affected version(s) =1.0.x-dev

Fix Suggestion:

Update to version no_fix

fenghuilee/phalbee-admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

zafranf/zetthcore (PHP):

Affected version(s) >=dev-development <v0.1.0

Fix Suggestion:

Update to version v0.1.0

wbe/rapyd (PHP):

Affected version(s) =dev-fixes53

Fix Suggestion:

Update to version no_fix

wbe/rapyd (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

ovic-core/framework (PHP):

Affected version(s) >=dev-master <=1.0.5

Fix Suggestion:

Update to version no_fix

isack999/yii2-tagsinput (PHP):

Affected version(s) >=1.1.0 <=1.1.2

Fix Suggestion:

Update to version no_fix

3xw/attachment (PHP):

Affected version(s) >=3.8.0.2 <4.0.0.1

Fix Suggestion:

Update to version 4.0.0.1

arthurgroup/websitebuilder (PHP):

Affected version(s) =1.1.10.x-dev <1.1.11.x-dev

Fix Suggestion:

Update to version 1.1.11.x-dev

woldy/cms (PHP):

Affected version(s) >=dev-master <=1.0.4

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) =1.0.162 <1.0.163

Fix Suggestion:

Update to version 1.0.163

tinindja/microweber-for-laravel-5.8 (PHP):

Affected version(s) =dev-contact_form_fix_sr-1 <1.0.2.x-dev

Fix Suggestion:

Update to version 1.0.2.x-dev

stackup/auth (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1.18 <v0.1.19

Fix Suggestion:

Update to version v0.1.19

dgvai/laravel-adminlte-components (PHP):

Affected version(s) >=2.0.0 <=2.1.2

Fix Suggestion:

Update to version no_fix

zafranf/zetthcore (PHP):

Affected version(s) >=dev-v0.1.3.4-mur <v0.4.35

Fix Suggestion:

Update to version v0.4.35

pygon-git/plugin-core (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

aropixel/admin-bundle (PHP):

Affected version(s) >=v1.0.1 <v1.2.20

Fix Suggestion:

Update to version v1.2.20

voila_cms/crudbooster (PHP):

Affected version(s) =v2.0.x-dev <v2.0.1

Fix Suggestion:

Update to version v2.0.1

constantingd/bootstrap-tagsinput (PHP):

Affected version(s) >=dev-master <=1.1

Fix Suggestion:

Update to version no_fix

cideator/ciadmin (PHP):

Affected version(s) >=dev-master <=v0.1.5

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) >=v0.1.29 <v0.1.31

Fix Suggestion:

Update to version v0.1.31

pozoltd/pz (PHP):

Affected version(s) >=dev-deploy <dev-pz

Fix Suggestion:

Update to version dev-pz

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.11 <3.0.39

Fix Suggestion:

Update to version 3.0.39

nosh2/nosh2 (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/loader-utils-and-resolve-url-loader-1.4.2 <dev-dependabot/composer/guzzlehttp/guzzle-7.4.3

Fix Suggestion:

Update to version dev-dependabot/composer/guzzlehttp/guzzle-7.4.3

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.11 <v0.9.21

Fix Suggestion:

Update to version v0.9.21

tfarias/instalador-tfarias (PHP):

Affected version(s) =dev-tfarias-patch-1

Fix Suggestion:

Update to version no_fix

edutalk-cms/assets-management (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

someline/someline-starter (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

tfarias/instalador-tfarias (PHP):

Affected version(s) =dev-main <dev-master

Fix Suggestion:

Update to version dev-master

3xw/attachment (PHP):

Affected version(s) >=0.0.2 <0.3.1.5

Fix Suggestion:

Update to version 0.3.1.5

chuckbe/chuckcms (PHP):

Affected version(s) >=v0.1-beta.4 <v0.1-beta.6

Fix Suggestion:

Update to version v0.1-beta.6

semisalov/fix-cms-core (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

moravio/zofe-rapyd (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

heimrichhannot/contao-tagsinput (PHP):

Affected version(s) =dev-contao5

Fix Suggestion:

Update to version no_fix

dolivel/base (PHP):

Affected version(s) =v0.0.5 <0.0.6

Fix Suggestion:

Update to version 0.0.6

spiderworks/dashboard (PHP):

Affected version(s) >=dev-master <=v1.0.1

Fix Suggestion:

Update to version no_fix

pygon-git/plugin-core (PHP):

Affected version(s) >=0.0.16 <=0.0.17

Fix Suggestion:

Update to version no_fix

spiderworks/miniweb (PHP):

Affected version(s) >=dev-master <=1.0.4

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) =3.0.64 <3.0.65

Fix Suggestion:

Update to version 3.0.65

snizhko_zofe/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

newday-me/think-cms (PHP):

Affected version(s) =1.0.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

writecl/rapyd (PHP):

Affected version(s) =3.0.0 <4.0.0

Fix Suggestion:

Update to version 4.0.0

michalwolinski/wbiztool-laravel (PHP):

Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-foundation-4.4.7

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/http-foundation-4.4.7

sgsoft-studio/webed (PHP):

Affected version(s) >=2.0 <2.0.8

Fix Suggestion:

Update to version 2.0.8

vis/builder_lara_5 (PHP):

Affected version(s) =dev-master <tag

Fix Suggestion:

Update to version tag

webcol/calima (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

soda-framework/bootlegcms (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

tianrosandhy/base-cms (PHP):

Affected version(s) >=v1.1.0 <v1.4.0

Fix Suggestion:

Update to version v1.4.0

mladindima/rapyd (PHP):

Affected version(s) =1.1.4 <1.2.0

Fix Suggestion:

Update to version 1.2.0

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1.13 <v0.1.14

Fix Suggestion:

Update to version v0.1.14

ush-webdev/cms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

lkk/yii2-inspinia (PHP):

Affected version(s) =dev-master <0.1

Fix Suggestion:

Update to version 0.1

bitpixel/springcms (PHP):

Affected version(s) >=dev-development <=dev-master

Fix Suggestion:

Update to version no_fix

andrewradchenko/hostcms (PHP):

Affected version(s) >=dev-master <=1.0.1

Fix Suggestion:

Update to version no_fix

moravio/zofe-rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

sentora/laravel-base-sentora (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

snizhko/rapyd (PHP):

Affected version(s) =1.1.4 <1.2.0

Fix Suggestion:

Update to version 1.2.0

vis/builder (PHP):

Affected version(s) >=v1.1.2 <=1.2.90009

Fix Suggestion:

Update to version no_fix

kriss/yii2-beyond-admin-asset (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

labo/admin-bundle (PHP):

Affected version(s) >=dev-amato <=dev-master

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.2.1 <v3.x-dev

Fix Suggestion:

Update to version v3.x-dev

vis/builder_lara_5 (PHP):

Affected version(s) =3.0.94 <3.0.95

Fix Suggestion:

Update to version 3.0.95

forkcms/forkcms (PHP):

Affected version(s) =4.0.2 <dev-dependabot/composer/mailmotor/mailmotor-bundle-4.0.2

Fix Suggestion:

Update to version dev-dependabot/composer/mailmotor/mailmotor-bundle-4.0.2

xindong888/yii2tags (PHP):

Affected version(s) >=dev-test <=v1.0

Fix Suggestion:

Update to version no_fix

voila_cms/crudbooster (PHP):

Affected version(s) >=v2.1.9 <=v3.0.0.41

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1.20 <v0.1.21

Fix Suggestion:

Update to version v0.1.21

moravio/zofe-rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

xdd/x-template (PHP):

Affected version(s) >=dev-element_compoent <=v1.0.0

Fix Suggestion:

Update to version no_fix

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-admin_mobile <dev-admin_redesign

Fix Suggestion:

Update to version dev-admin_redesign

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-contact_from_email_providers <dev-custom_field_button

Fix Suggestion:

Update to version dev-custom_field_button

waigeo/jsloggerbundle (PHP):

Affected version(s) =v1.0.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

heimrichhannot/contao-tagsinput (PHP):

Affected version(s) >=dev-master <3.0.0-beta0

Fix Suggestion:

Update to version 3.0.0-beta0

aropixel/admin-bundle (PHP):

Affected version(s) >=v1.2.21 <1.2.30

Fix Suggestion:

Update to version 1.2.30

hongyukeji/inspinia (PHP):

Affected version(s) =v1.0.0

Fix Suggestion:

Update to version no_fix

zofe/rapyd (PHP):

Affected version(s) =1.4.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

arthurgroup/websitebuilder (PHP):

Affected version(s) >=1.0.8.x-dev <1.0.10.x-dev

Fix Suggestion:

Update to version 1.0.10.x-dev

jimmlog/inspinia-theme (PHP):

Affected version(s) >=dev-master <v2.6.0

Fix Suggestion:

Update to version v2.6.0

snizhko/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

syscover/pulsar (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

newday-me/think-cms (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

futurando-oficial/cakephp-admin (PHP):

Affected version(s) >=dev-release/v1.0.3 <=v1.0.13

Fix Suggestion:

Update to version no_fix

egorryaroslavl/admin (PHP):

Affected version(s) >=1.0.3 <=1.0.15

Fix Suggestion:

Update to version no_fix

dizatech/rapyd (PHP):

Affected version(s) >=dev-master <=v2.6.7

Fix Suggestion:

Update to version no_fix

serverfireteam/rapyd-laravel (PHP):

Affected version(s) >=1.3.27 <=1.5.24

Fix Suggestion:

Update to version no_fix

tinindja/microweber-for-laravel-5.8 (PHP):

Affected version(s) >=dev-add_custom_data_on_product <oop-preview

Fix Suggestion:

Update to version oop-preview

kun391/yii2-tagsinput (PHP):

Affected version(s) >=dev-initial <=dev-master

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) =3.0.1 <3.0.2

Fix Suggestion:

Update to version 3.0.2

sonlabs/php-paypal (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

dolivel/base (PHP):

Affected version(s) =v0.0.4 <0.0.5

Fix Suggestion:

Update to version 0.0.5

arwp/main-master (PHP):

Affected version(s) >=dev-main <=v1.1.7

Fix Suggestion:

Update to version no_fix

bretto36/rapyd-laravel (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

microweber/microweber (PHP):

Affected version(s) =1.x-dev <1.0.x-dev

Fix Suggestion:

Update to version 1.0.x-dev

dot/platform (PHP):

Affected version(s) >=dev-master <dev-production

Fix Suggestion:

Update to version dev-production

lupael/admindek-laravel (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

wi-development/my-framework (PHP):

Affected version(s) =dev-master <0.1

Fix Suggestion:

Update to version 0.1

hirenmangukiya/autocrud (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

opensmarty/opensmarty-starter (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) =dev-development <dev-feature/multisite

Fix Suggestion:

Update to version dev-feature/multisite

futurando-oficial/cakephp-admin (PHP):

Affected version(s) >=dev-feature/css_template_pages <dev-release/v1.0.1

Fix Suggestion:

Update to version dev-release/v1.0.1

tec-more/assets-management (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

microweber/microweber (PHP):

Affected version(s) >=1.0.8.x-dev <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

dot/platform (PHP):

Affected version(s) >=0.0.1 <0.4.26

Fix Suggestion:

Update to version 0.4.26

snizhko/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

tmfw/template (PHP):

Affected version(s) >=0.1.2 <=0.1.6.6

Fix Suggestion:

Update to version no_fix

dolivel/base (PHP):

Affected version(s) =v0.0.2 <0.0.3

Fix Suggestion:

Update to version 0.0.3

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.102 <3.0.108

Fix Suggestion:

Update to version 3.0.108

rbshubham/yii2-widget-tagsinput (PHP):

Affected version(s) >=dev-master <4.0

Fix Suggestion:

Update to version 4.0

guoyu/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.1

Fix Suggestion:

Update to version no_fix

aropixel/admin-bundle (PHP):

Affected version(s) >=dev-feature/v1.3.0/rgpd/cs <v0.1.6

Fix Suggestion:

Update to version v0.1.6

e282486518/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.2

Fix Suggestion:

Update to version no_fix

zofe/rapyd (PHP):

Affected version(s) =1.3.7 <1.3.8

Fix Suggestion:

Update to version 1.3.8

s-dev/cms_lara_5 (PHP):

Affected version(s) >=dev-add_time_field <=1.0.224

Fix Suggestion:

Update to version no_fix

khaled3afan/linkati (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.166 <2.1.189

Fix Suggestion:

Update to version 2.1.189

midsmr/laravel-angular (PHP):

Affected version(s) >=dev-main <dev-dependabot/github_actions/dependabot/fetch-metadata-1.3.4

Fix Suggestion:

Update to version dev-dependabot/github_actions/dependabot/fetch-metadata-1.3.4

doitonlinemedia/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

sashapekh/builder_lara_5 (PHP):

Affected version(s) >=dev-feat_block_system <=v1.0.0

Fix Suggestion:

Update to version no_fix

icemanbsi/full-silex-admin (PHP):

Affected version(s) >=dev-master <=v1.0.42

Fix Suggestion:

Update to version no_fix

bretto36/rapyd-laravel (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

tianrosandhy/cms (PHP):

Affected version(s) =dev-master <v0.1

Fix Suggestion:

Update to version v0.1

madedwi/yii2-admincms (PHP):

Affected version(s) >=v0.1 <=v0.1.1

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.212 <2.1.216

Fix Suggestion:

Update to version 2.1.216

leskhq/laravel-enterprise-starter-kit (PHP):

Affected version(s) =dev-l55

Fix Suggestion:

Update to version no_fix

devp-eu/tmcms-core (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.53 <3.0.57

Fix Suggestion:

Update to version 3.0.57

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.83 <3.0.85

Fix Suggestion:

Update to version 3.0.85

delatbabel/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

midsmr/laravel-angular (PHP):

Affected version(s) >=dev-dependabot/github_actions/dependabot/fetch-metadata-1.3.5 <=dev-dependabot/github_actions/stefanzweifel/git-auto-commit-action-5

Fix Suggestion:

Update to version no_fix

keshancs/inspinia-admin-bundle (PHP):

Affected version(s) =1.1.0 <1.1.1

Fix Suggestion:

Update to version 1.1.1

vis/builder_lara_5 (PHP):

Affected version(s) >=1.0.696 <2.0.109

Fix Suggestion:

Update to version 2.0.109

mladindima/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

aropixel/admin-bundle (PHP):

Affected version(s) >=dev-develop <dev-feature/v1.2.36/david/multilang

Fix Suggestion:

Update to version dev-feature/v1.2.36/david/multilang

wbe/rapyd (PHP):

Affected version(s) =1.4.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

aropixel/admin-bundle (PHP):

Affected version(s) =v1.2.43 <v1.2.44

Fix Suggestion:

Update to version v1.2.44

bretto36/rapyd-laravel (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

bootleg/cms (PHP):

Affected version(s) >=dev-bower_updates <1.0

Fix Suggestion:

Update to version 1.0

novadevs-opensource/simultra-wms (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/url-parse-1.5.7 <dev-dependabot/npm_and_yarn/follow-redirects-1.14.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/follow-redirects-1.14.7

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.3 <3.0.10

Fix Suggestion:

Update to version 3.0.10

codigu/codicms (PHP):

Affected version(s) =dev-featue/angular <dev-feature/add_new_migration

Fix Suggestion:

Update to version dev-feature/add_new_migration

newbranding/blog (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

msppack/ddsadmin (PHP):

Affected version(s) =1.0.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

za-laravel/laravel-admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tianrosandhy/base-cms (PHP):

Affected version(s) =v2.2.2 <v2.2.3

Fix Suggestion:

Update to version v2.2.3

tianrosandhy/base-cms (PHP):

Affected version(s) >=v2.3.0 <=v3.2.2

Fix Suggestion:

Update to version no_fix

phuongnamsoft/admin (PHP):

Affected version(s) >=v1.0.4 <=v1.0.6

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) =1.0.270 <1.0.271

Fix Suggestion:

Update to version 1.0.271

vis/builder_lara_5 (PHP):

Affected version(s) =1.0.608 <1.0.609

Fix Suggestion:

Update to version 1.0.609

vuthaihoc/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

novikoff/personal (PHP):

Affected version(s) >=dev-Andrew <=dev-master

Fix Suggestion:

Update to version no_fix

laramaker/rapyd (PHP):

Affected version(s) =3.0.0

Fix Suggestion:

Update to version no_fix

dsteiner23/drupal-theme-inspinia (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ddpro/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

forkcms/forkcms (PHP):

Affected version(s) >=4.0.3 <dev-dependabot/composer/symfony/symfony-4.4.51

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/symfony-4.4.51

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.0 <v0.9.10

Fix Suggestion:

Update to version v0.9.10

zofe/rapyd (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

piksera/core (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

psytelepat/lootbox (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

hakoncms/hakoncms (PHP):

Affected version(s) =dev-dev

Fix Suggestion:

Update to version no_fix

yuwaka/helper (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

simexis/rapyd (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

someline/someline-starter (PHP):

Affected version(s) =v0.8.2

Fix Suggestion:

Update to version no_fix

lkk/yii2-inspinia (PHP):

Affected version(s) >=1.0 <=1.3

Fix Suggestion:

Update to version no_fix

snizhko_zofe/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

vuthaihoc/rapyd (PHP):

Affected version(s) =dev-fixes53

Fix Suggestion:

Update to version no_fix

drauta/blog-laravel (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bretto36/rapyd-laravel (PHP):

Affected version(s) =dev-fixes53

Fix Suggestion:

Update to version no_fix

vis/builder (PHP):

Affected version(s) >=dev-master <1.1.2

Fix Suggestion:

Update to version 1.1.2

imagina/bcrud-module (PHP):

Affected version(s) =dev-master <2.0.0

Fix Suggestion:

Update to version 2.0.0

aropixel/admin-bundle (PHP):

Affected version(s) =v1.2.36 <v1.2.37

Fix Suggestion:

Update to version v1.2.37

zafranf/zetthcore (PHP):

Affected version(s) >=v0.4.40 <v0.5.0

Fix Suggestion:

Update to version v0.5.0

dolivel/base (PHP):

Affected version(s) =v0.0.1 <0.0.2

Fix Suggestion:

Update to version 0.0.2

feiron/felaraframe (PHP):

Affected version(s) >=dev-development <BetaV1.4

Fix Suggestion:

Update to version BetaV1.4

skullyframework/project (PHP):

Affected version(s) =dev-staging <0.1.x-dev

Fix Suggestion:

Update to version 0.1.x-dev

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1.23 <v0.1.24

Fix Suggestion:

Update to version v0.1.24

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.103 <2.1.141

Fix Suggestion:

Update to version 2.1.141

toulen/liudian_admin (PHP):

Affected version(s) >=2.0.5 <=2.0.9

Fix Suggestion:

Update to version no_fix

novadevs-opensource/simultra-wms (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/follow-redirects-1.14.8 <dev-dependabot/npm_and_yarn/tar-4.4.15

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/tar-4.4.15

syscover/pulsar (PHP):

Affected version(s) >=v2.0.13 <v2.0.17

Fix Suggestion:

Update to version v2.0.17

snizhko/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

navatech/yii2-cms (PHP):

Affected version(s) >=dev-master <=1.0.0.1

Fix Suggestion:

Update to version no_fix

johnhed/admindek (PHP):

Affected version(s) >=dev-master <=0.9

Fix Suggestion:

Update to version no_fix

waigeo/jsloggerbundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

sjtu-umji-tech/ji-life (PHP):

Affected version(s) =dev-inspinia

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1-beta.7 <v0.1.1

Fix Suggestion:

Update to version v0.1.1

someline/someline-starter-app (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

moxuandi/yii2-tagsinput (PHP):

Affected version(s) >=dev-master <=v2.2.0.1

Fix Suggestion:

Update to version no_fix

futurando-oficial/cakephp-admin (PHP):

Affected version(s) =dev-feature/changes_teste <dev-feature/changes_tproject

Fix Suggestion:

Update to version dev-feature/changes_tproject

mladindima/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

zofe/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

fesal_voila/cms_base_voila (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

isack999/yii2-tagsinput (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

voila_cms/crudbooster (PHP):

Affected version(s) =dev-dev <dev-master

Fix Suggestion:

Update to version dev-master

tianrosandhy/base-cms (PHP):

Affected version(s) =v2.2.0 <v2.2.1

Fix Suggestion:

Update to version v2.2.1

vuthaihoc/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

dancesmile/fastadmin (PHP):

Affected version(s) >=dev-master <1.1

Fix Suggestion:

Update to version 1.1

dolivel/base (PHP):

Affected version(s) =v0.0.6 <0.0.7

Fix Suggestion:

Update to version 0.0.7

codigu/codicms (PHP):

Affected version(s) >=dev-feature/menu_schema <=dev-master

Fix Suggestion:

Update to version no_fix

snizhko_zofe/rapyd (PHP):

Affected version(s) =1.1.4 <1.2.0

Fix Suggestion:

Update to version 1.2.0

arthurgroup/websitebuilder (PHP):

Affected version(s) =1.2.x-dev <dev-1.2-test-pm

Fix Suggestion:

Update to version dev-1.2-test-pm

msppack/ddsadmin (PHP):

Affected version(s) >=3.0.0 <3.2.0

Fix Suggestion:

Update to version 3.2.0

microweber/microweber (PHP):

Affected version(s) >=dev-account-manager <oop-preview

Fix Suggestion:

Update to version oop-preview

novadevs-opensource/simultra-wms (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/datatables.net-1.11.3 <v0.1.1

Fix Suggestion:

Update to version v0.1.1

lemlabs/common-bundle (PHP):

Affected version(s) =dev-coco <dev-master

Fix Suggestion:

Update to version dev-master

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-unsplash_integration <dev-update_custom_fields_design

Fix Suggestion:

Update to version dev-update_custom_fields_design

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-media_library_unsplash_update <dev-newsletter_module

Fix Suggestion:

Update to version dev-newsletter_module

aerni/translator (PHP):

Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/npm_and_yarn/minimist-1.2.6

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6

aropixel/admin-bundle (PHP):

Affected version(s) >=v1.2.38 <v1.2.40

Fix Suggestion:

Update to version v1.2.40

mshule/laravel-pipes (PHP):

Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <v1.2

Fix Suggestion:

Update to version v1.2

vis/builder_lara_5 (PHP):

Affected version(s) =1.0.694 <1.0.695

Fix Suggestion:

Update to version 1.0.695

vis/builder_lara_5 (PHP):

Affected version(s) =3.0.100 <3.0.101

Fix Suggestion:

Update to version 3.0.101

vuthaihoc/rapyd (PHP):

Affected version(s) =1.4.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

moravio/zofe-rapyd (PHP):

Affected version(s) >=dev-laravel-5.8 <=dev-fixes53

Fix Suggestion:

Update to version no_fix

imzhi/jf-admin (PHP):

Affected version(s) >=dev-dev <=dev-laravel58_support

Fix Suggestion:

Update to version no_fix

tianrosandhy/cms (PHP):

Affected version(s) >=v1.0.0 <=v1.1.0

Fix Suggestion:

Update to version no_fix

arthurgroup/websitebuilder (PHP):

Affected version(s) =dev-tests <dev-tg

Fix Suggestion:

Update to version dev-tg

nova-framework/novacms (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

procoders/admin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

digitaldev-lx/magnifinance (PHP):

Affected version(s) >=dev-develop <dev-master

Fix Suggestion:

Update to version dev-master

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.89 <3.0.91

Fix Suggestion:

Update to version 3.0.91

serverfireteam/rapyd-laravel (PHP):

Affected version(s) >=1.3.2 <1.3.26

Fix Suggestion:

Update to version 1.3.26

bonweb/laradmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

egorryaroslavl/admin (PHP):

Affected version(s) >=dev-master <1.0.2

Fix Suggestion:

Update to version 1.0.2

zofe/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

novadevs-opensource/simultra-wms (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/tar-4.4.19 <=dev-dependabot/npm_and_yarn/y18n-3.2.2

Fix Suggestion:

Update to version no_fix

3xw/attachment (PHP):

Affected version(s) >=0.3.1.6 <3.8.0.1

Fix Suggestion:

Update to version 3.8.0.1

tec-more/assets-management (PHP):

Affected version(s) >=3.0.0 <3.0.2

Fix Suggestion:

Update to version 3.0.2

arthurgroup/websitebuilder (PHP):

Affected version(s) =1.1.7.x-dev <1.1.8.x-dev

Fix Suggestion:

Update to version 1.1.8.x-dev

emiliosh/rapyd (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

microweber/microweber (PHP):

Affected version(s) =dev-revert-797-master

Fix Suggestion:

Update to version no_fix

gajendrajain20/laravel-pioneer-cms (PHP):

Affected version(s) >=dev-development <=V1.1.1

Fix Suggestion:

Update to version no_fix

dot/auth (PHP):

Affected version(s) >=0.1.1 <0.1.5

Fix Suggestion:

Update to version 0.1.5

centurion/app (PHP):

Affected version(s) >=dev-master <=0.0.5

Fix Suggestion:

Update to version no_fix

skullyframework/skully-admin (PHP):

Affected version(s) =dev-staging <v.0.1.7

Fix Suggestion:

Update to version v.0.1.7

syscover/pulsar (PHP):

Affected version(s) =v2.0.18 <v2.0.19

Fix Suggestion:

Update to version v2.0.19

romjkeeeen/fix-cms-core1 (PHP):

Affected version(s) >=dev-dev-master <=dev-php8-dev-master

Fix Suggestion:

Update to version no_fix

laramod/admin-core (PHP):

Affected version(s) >=0.2.4 <=0.5.2

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.142 <2.1.165

Fix Suggestion:

Update to version 2.1.165

tmfw/template (PHP):

Affected version(s) =dev-master <0.1.1

Fix Suggestion:

Update to version 0.1.1

vis/builder_lara_5 (PHP):

Affected version(s) >=1.0.678 <1.0.681

Fix Suggestion:

Update to version 1.0.681

zafranf/zetthcore (PHP):

Affected version(s) >=v0.4.36 <v0.4.39

Fix Suggestion:

Update to version v0.4.39

vis/builder_lara_5 (PHP):

Affected version(s) >=1.0.683 <1.0.693

Fix Suggestion:

Update to version 1.0.693

vuthaihoc/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

wbe/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

vis/builder_lara_5 (PHP):

Affected version(s) >=2.1.192 <2.1.201

Fix Suggestion:

Update to version 2.1.201

serverfireteam/rapyd-laravel (PHP):

Affected version(s) >=dev-alenoosh <1.0.0

Fix Suggestion:

Update to version 1.0.0

lemon/yii2-inspinia (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

sergeyugai/badpack (PHP):

Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-kernel-5.4.20

Fix Suggestion:

Update to version dev-dependabot/composer/symfony/http-kernel-5.4.20

skeeks/yii2-tagsinput (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

ado/formx (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

wbe/rapyd (PHP):

Affected version(s) =1.3.x-dev <1.3.1

Fix Suggestion:

Update to version 1.3.1

mladindima/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

erenmustafaozdal/laravel-modules-core (PHP):

Affected version(s) =dev-master <v0.1.0

Fix Suggestion:

Update to version v0.1.0

mangrove/rapyd-laravel (PHP):

Affected version(s) >=1.3.2 <1.3.26

Fix Suggestion:

Update to version 1.3.26

fesal/cms_base_voila (PHP):

Affected version(s) >=dev-master <=1.0

Fix Suggestion:

Update to version no_fix

chuckbe/chuckcms (PHP):

Affected version(s) =v0.1.25 <v0.1.26

Fix Suggestion:

Update to version v0.1.26

tianrosandhy/base-cms (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

vis/builder_lara_5 (PHP):

Affected version(s) >=3.0.61 <3.0.63

Fix Suggestion:

Update to version 3.0.63

snizhko_zofe/rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

tokalink/starter (PHP):

Affected version(s) >=v1.0.4 <=v1.0.7

Fix Suggestion:

Update to version no_fix

vis/builder_lara_5 (PHP):

Affected version(s) >=2.0.111 <2.1.101

Fix Suggestion:

Update to version 2.1.101

nosh2/nosh2 (PHP):

Affected version(s) >=dev-dependabot/composer/guzzlehttp/guzzle-7.4.4 <=dev-dependabot/composer/laravel/framework-8.40.0

Fix Suggestion:

Update to version no_fix

tianrosandhy/base-cms (PHP):

Affected version(s) >=v1.6.0 <v2.1.2

Fix Suggestion:

Update to version v2.1.2

aropixel/admin-bundle (PHP):

Affected version(s) >=v1.2.45 <v1.3.8

Fix Suggestion:

Update to version v1.3.8

toulen/liudian_admin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

vuthaihoc/rapyd (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

dolivel/base (PHP):

Affected version(s) =v0.0.3 <0.0.4

Fix Suggestion:

Update to version 0.0.4

newbranding/blog (PHP):

Affected version(s) >=1.1 <=1.6.2

Fix Suggestion:

Update to version no_fix

rbshubham/yii2-widget-tagsinput (PHP):

Affected version(s) >=5.0 <=8.0

Fix Suggestion:

Update to version no_fix

mangrove/rapyd-laravel (PHP):

Affected version(s) >=dev-alenoosh <1.0.0

Fix Suggestion:

Update to version 1.0.0

laramod/admin-core (PHP):

Affected version(s) >=dev-dev <0.1.0

Fix Suggestion:

Update to version 0.1.0

vis/builder_lara_5 (PHP):

Affected version(s) =3.0.98 <3.0.99

Fix Suggestion:

Update to version 3.0.99

adwconsulting/adw-helper (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

camael24/sohapi (PHP):

Affected version(s) =dev-master <0.1

Fix Suggestion:

Update to version 0.1

mangrove/rapyd-laravel (PHP):

Affected version(s) >=1.3.27 <=1.5.17

Fix Suggestion:

Update to version no_fix

etdsolutions/bootstrap-tags-input (PHP):

Affected version(s) >=dev-master <=0.5

Fix Suggestion:

Update to version no_fix

spiderwork/laravel-dashboard (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

microweber/microweber (PHP):

Affected version(s) >=dev-Radanovn-patch-1 <1.0.2.x-dev

Fix Suggestion:

Update to version 1.0.2.x-dev

bootsetrap/bootsetrapmd (PHP):

Affected version(s) >=1.1 <=1.2

Fix Suggestion:

Update to version no_fix

moravio/zofe-rapyd (PHP):

Affected version(s) =1.4.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

bretto36/rapyd-laravel (PHP):

Affected version(s) =1.4.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

alirezab/admin-panel (PHP):

Affected version(s) >=1.0 <1.1

Fix Suggestion:

Update to version 1.1

tinindja/microweber-for-laravel-5.8 (PHP):

Affected version(s) >=1.0.8.x-dev <1.1.x-dev

Fix Suggestion:

Update to version 1.1.x-dev

soyamore/quizapp (PHP):

Affected version(s) >=dev-develop <=dev-upgrade/5.3

Fix Suggestion:

Update to version no_fix

arx/arxmin (PHP):

Affected version(s) >=4.2.0 <5.0.1

Fix Suggestion:

Update to version 5.0.1

maxyc/laravel-adminlte-components (PHP):

Affected version(s) >=dev-master <=0.0.1

Fix Suggestion:

Update to version no_fix

moravio/zofe-rapyd (PHP):

Affected version(s) >=dev-fix-csv-on-macs <1.0.0

Fix Suggestion:

Update to version 1.0.0

zofe/rapyd (PHP):

Affected version(s) =1.1.x-dev <1.1.1

Fix Suggestion:

Update to version 1.1.1

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) =v0.9.22 <v0.9.23

Fix Suggestion:

Update to version v0.9.23

Related Resources (1)

https://github.com/rendrjs/rendr-handlebars/pull/61

Do you need more information?

CVSS v4

Base Score:

8.5

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

LOW

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

HIGH

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

AI app security

Mend AI

Application security

Mend AppSec

Dependency management

Mend Renovate

Expand coverage

Runtime and beyond

AI security

Code security

Supply chain security

Compliance & reporting

vs. AI security tools

vs. AppSec tools

Buyer’s guides

About Mend.io

Partners & people

Customers

Learn & explore

Guides

Developers hub