medium5.4
CVE-2020-13459
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
Impact
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | verbb/image-resizer | < 2.0.9 | 2.0.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verbb | Image Resizer | before 2.0.9 |