CVE-2020-13756observed exploitation

CVE-2020-13756

Published · Updated

Follow this CVE+ Monitor php-horde-css-parser+ Monitor sabberworm/php-css-parser

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

37Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 50%
from disclosure to weapon
Published on NVDJun 3
VulnCheck+588d
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.
Affected products
n/a · n/a