Php Api Doc
Approved changes feed: RSS · Atom
cpe:2.3:a:xinliangcoder:php_api_doc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xinliangcoder (da441622-0e23-531c-9ed9-f5bcdf69a686) |
|---|---|
| Product | Php Api Doc (4d7e416f-5b3e-5f9c-bd9c-56ee2f582792) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/xinliangcoder/php_api_doc |
purl2cpe | 2026-06-01 10:12:41.180488 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32844 |
vulnerable | 2026-06-08 07:57:18.189391 |
XinLiangCoder / php_api_doc Reflected XSS via list_method.php
MEDIUM (6.1)
XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious code through the f parameter. Attackers can craft a malicious URL with unsanitized input in the GET request parameter that is output directly to the page without proper neutralization, enabling session hijacking, credential theft, or malware distribution within the application context.
Published: 2026-03-20T17:26:30.839Z
Updated: 2026-03-23T15:44:20.725Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.