WS-2020-0093 | Mend Vulnerability Database

Vulnerability DatabaseWS-2020-0093

WS-2020-0093

Published:May 14, 2026

Updated:May 14, 2026

lazysizes before 5.2.1-rc1 are vulnerable to Cross-Site Scripting. The video-embed plugin fails to sanitize the following attributes: data-vimeo, data-vimeoparams, data-youtube and data-ytparams. This allows attackers to execute arbitrary JavaScript in a victim's browser if the attacker has control over the vulnerable attributes.

Affected Packages

lazysizes (CDN_JS):

Affected version(s) >=0.4.0 <5.2.1

Fix Suggestion:

Update to version 5.2.1

lazysizes (NPM):

Affected version(s) >=0.4.0 <5.2.1

Fix Suggestion:

Update to version 5.2.1

our.umbraco.slimsy (NUGET):

Affected version(s) >=2.0.0-beta1 <2.0.0-beta4

Fix Suggestion:

Update to version 2.0.0-beta4

our.umbraco.slimsy (NUGET):

Affected version(s) =3.0.0-beta3 <3.0.0-beta4

Fix Suggestion:

Update to version 3.0.0-beta4

littlenorth.igloo (NUGET):

Affected version(s) >=5.0.0-beta001 <5.0.4-rc.1

Fix Suggestion:

Update to version 5.0.4-rc.1

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-gulp_migrate <dev-hideDraftPostsInMenu

Fix Suggestion:

Update to version dev-hideDraftPostsInMenu

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-addIconInfoRoute <dev-addLinkedInShare

Fix Suggestion:

Update to version dev-addLinkedInShare

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/roleMediatheque <dev-feature/rollBackPostCreatedBehaviour

Fix Suggestion:

Update to version dev-feature/rollBackPostCreatedBehaviour

bpocallaghan/titan (PHP):

Affected version(s) =1.2.0 <1.2.1

Fix Suggestion:

Update to version 1.2.1

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-fix/fixTailleIconsTiktok <dev-fix/landing-swipers-button

Fix Suggestion:

Update to version dev-fix/landing-swipers-button

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/manualFocusData <dev-feature/mapsKeys

Fix Suggestion:

Update to version dev-feature/mapsKeys

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-bugfix/section_banner <dev-bugfix/sessionExpiration

Fix Suggestion:

Update to version dev-bugfix/sessionExpiration

tollwerk/tw-base (PHP):

Affected version(s) >=dev-develop <v1.0.0

Fix Suggestion:

Update to version v1.0.0

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-fix/cropRatioSITMEA <dev-fix/cta-and-text-padding

Fix Suggestion:

Update to version dev-fix/cta-and-text-padding

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-master_legacy <dev-mirrorPageBreadcrumb

Fix Suggestion:

Update to version dev-mirrorPageBreadcrumb

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/addDescriptionAttachmentPreview <dev-feature/addFilterLazyImgLandswprSlide

Fix Suggestion:

Update to version dev-feature/addFilterLazyImgLandswprSlide

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/tradBoutonTelecharger <dev-feature/traduction

Fix Suggestion:

Update to version dev-feature/traduction

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/customHomeUrlMobile <dev-feature/default-tm-conf

Fix Suggestion:

Update to version dev-feature/default-tm-conf

bpocallaghan/titan (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets_setup/postcss-and-laravel-mix-8.4.19 <=dev-dependabot/npm_and_yarn/resources/assets_setup/y18n-4.0.1

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/mobileLayoutFocusCatalogChild <dev-feature/moreTouristInformations

Fix Suggestion:

Update to version dev-feature/moreTouristInformations

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/webpack-dev-middleware-5.3.4 <dev-Laravel_5.4

Fix Suggestion:

Update to version dev-Laravel_5.4

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/babel/traverse-7.23.6 <=dev-dependabot/npm_and_yarn/y18n-4.0.1

Fix Suggestion:

Update to version no_fix

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/path-parse-1.0.7 <dev-dependabot/npm_and_yarn/eventsource-1.1.1

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/eventsource-1.1.1

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-develop_legacy <dev-displayParentTagName

Fix Suggestion:

Update to version dev-displayParentTagName

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/browserslist-4.16.6 <dev-Laravel_5.2

Fix Suggestion:

Update to version dev-Laravel_5.2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/clearCacheUnpublishPost <dev-feature/convertShortcodeToBlocs

Fix Suggestion:

Update to version dev-feature/convertShortcodeToBlocs

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-revert-390-feature/respCustomAcfmargins <dev-show-sharing-links-on-click

Fix Suggestion:

Update to version dev-show-sharing-links-on-click

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/sectionBookblockLayout <dev-feature/sectionClasses

Fix Suggestion:

Update to version dev-feature/sectionClasses

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feat/CheckBaliseH1 <1.1.0

Fix Suggestion:

Update to version 1.1.0

dnadesign/silverstripe-lazyloaded-image (PHP):

Affected version(s) =0.2.x-dev <0.3.0

Fix Suggestion:

Update to version 0.3.0

bpocallaghan/titan (PHP):

Affected version(s) >=1.0.0 <1.0.2

Fix Suggestion:

Update to version 1.0.2

simplon/component_mvc (PHP):

Affected version(s) =0.0.2

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/addpicto <dev-feature/allow-opacity-bg-params

Fix Suggestion:

Update to version dev-feature/allow-opacity-bg-params

brunocfalcao/laraflash-website (PHP):

Affected version(s) >=dev-master <=v1.1.8

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/EskaladProxy <dev-feature/GeoJSONMea

Fix Suggestion:

Update to version dev-feature/GeoJSONMea

hadwao/image-inliner (PHP):

Affected version(s) >=dev-master <=dev-tests

Fix Suggestion:

Update to version no_fix

visol/viresponsiveimages (PHP):

Affected version(s) >=dev-master <0.9.14

Fix Suggestion:

Update to version 0.9.14

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/bookblock <dev-feature/bookblock-texts

Fix Suggestion:

Update to version dev-feature/bookblock-texts

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/follow-redirects-1.15.4 <v2.x-dev

Fix Suggestion:

Update to version v2.x-dev

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/addStationPicto <dev-feature/addTablePluginTinyMCE

Fix Suggestion:

Update to version dev-feature/addTablePluginTinyMCE

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/url-parse-1.5.1 <dev-dependabot/npm_and_yarn/url-parse-1.5.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/url-parse-1.5.7

etdsolutions/lazysizes (PHP):

Affected version(s) >=dev-master <=2.0.7

Fix Suggestion:

Update to version no_fix

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/websocket-extensions-0.1.4 <v1.x-dev

Fix Suggestion:

Update to version v1.x-dev

bpocallaghan/titan (PHP):

Affected version(s) >=1.2.2 <1.2.7

Fix Suggestion:

Update to version 1.2.7

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/translateDocButtonLabel <dev-feature/translateNL_BE

Fix Suggestion:

Update to version dev-feature/translateNL_BE

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/path-parse-1.0.7 <dev-dependabot/npm_and_yarn/bl-1.2.3

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/bl-1.2.3

tollwerk/tw-base (PHP):

Affected version(s) >=v4.0.0 <v4.7.0

Fix Suggestion:

Update to version v4.7.0

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-legacy/develop <dev-loadBlocksCloneLatre

Fix Suggestion:

Update to version dev-loadBlocksCloneLatre

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/addNewFilterTeaserDesc <dev-feature/addNewRuleRobotsTxt

Fix Suggestion:

Update to version dev-feature/addNewRuleRobotsTxt

derhaeuptling/contao-lazy-images (PHP):

Affected version(s) >=dev-dev <1.0.3

Fix Suggestion:

Update to version 1.0.3

bpocallaghan/titan (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/resources/assets_setup/color-string-1.6.0 <dev-dependabot/npm_and_yarn/resources/assets_setup/follow-redirects-1.14.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/resources/assets_setup/follow-redirects-1.14.7

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-fix/addTabsBloc <dev-fix/auto-focus-menu-order

Fix Suggestion:

Update to version dev-fix/auto-focus-menu-order

madhouse/craft-starter (PHP):

Affected version(s) >=1.0.5 <1.0.10

Fix Suggestion:

Update to version 1.0.10

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/addResponsiveDisplayOptionMapLayout <dev-feature/addResponsiveOptions

Fix Suggestion:

Update to version dev-feature/addResponsiveOptions

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/orderByTitleASCFilter <dev-feature/pageTeaserBgMoreData

Fix Suggestion:

Update to version dev-feature/pageTeaserBgMoreData

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/preventTplChoiceWithoutThumbnail <dev-feature/profileCustomPostType

Fix Suggestion:

Update to version dev-feature/profileCustomPostType

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/termCache <dev-feature/theRoadBook

Fix Suggestion:

Update to version dev-feature/theRoadBook

bpocallaghan/titan (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/resources/assets_setup/nth-check-and-laravel-mix-2.1.1 <dev-dependabot/npm_and_yarn/resources/assets_setup/minimatch-3.1.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/resources/assets_setup/minimatch-3.1.2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-bugfix/sheetPreviewStartYear <dev-bugfix/unpublish

Fix Suggestion:

Update to version dev-bugfix/unpublish

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) =dev-version_1 <1.0.1

Fix Suggestion:

Update to version 1.0.1

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/enqueueLibraryMomentTz <dev-feature/faq-to-groups

Fix Suggestion:

Update to version dev-feature/faq-to-groups

webgene/webgene-project (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/addIframeResizer <dev-feature/addLabelPublicationDate

Fix Suggestion:

Update to version dev-feature/addLabelPublicationDate

derhaeuptling/contao-lazy-images (PHP):

Affected version(s) =3.0.8

Fix Suggestion:

Update to version no_fix

bpocallaghan/titan (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/resources/assets_setup/dot-prop-4.2.1 <dev-dependabot/npm_and_yarn/resources/assets_setup/tar-4.4.19

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/resources/assets_setup/tar-4.4.19

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/StringTranslation <dev-feature/TplPopin

Fix Suggestion:

Update to version dev-feature/TplPopin

bpocallaghan/titan (PHP):

Affected version(s) >=1.0.11 <dev-dependabot/npm_and_yarn/resources/assets_setup/eventsource-1.1.1

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/resources/assets_setup/eventsource-1.1.1

madhouse/craft-starter (PHP):

Affected version(s) >=1.0.1 <1.0.3

Fix Suggestion:

Update to version 1.0.3

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/highlightsCustomContent <dev-feature/humanizeSheetTitleBreadcrumb

Fix Suggestion:

Update to version dev-feature/humanizeSheetTitleBreadcrumb

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/improveRGAA <dev-feature/improveResponsiveOrderWording

Fix Suggestion:

Update to version dev-feature/improveResponsiveOrderWording

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-bugfix/detailsFieldSejourPage <dev-bugfix/mirrorPagePreview

Fix Suggestion:

Update to version dev-bugfix/mirrorPagePreview

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/protectedPageErrorMessage <dev-feature/pwaHowTo

Fix Suggestion:

Update to version dev-feature/pwaHowTo

dnadesign/silverstripe-lazyloaded-image (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feat/AddDataLayer <dev-feature/AddonCookies

Fix Suggestion:

Update to version dev-feature/AddonCookies

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-structure <dev-test

Fix Suggestion:

Update to version dev-test

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/multi-9f37c16f8f <0.0.1

Fix Suggestion:

Update to version 0.0.1

voidagency/vactory-project (PHP):

Affected version(s) >=dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/addNoPaddingOptionOnTabs <dev-feature/addPinnableContent

Fix Suggestion:

Update to version dev-feature/addPinnableContent

bpocallaghan/titan (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets_setup/browserslist-4.16.6 <dev-L5.2

Fix Suggestion:

Update to version dev-L5.2

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/analyticsBtnBlock <dev-feature/bloc-titles

Fix Suggestion:

Update to version dev-feature/bloc-titles

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/countdownBloc <dev-feature/createdPostsDate

Fix Suggestion:

Update to version dev-feature/createdPostsDate

bpocallaghan/titan (PHP):

Affected version(s) =1.0.3 <1.0.4

Fix Suggestion:

Update to version 1.0.4

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/addWrapButtonsAcf <dev-feature/addon-thumbnails

Fix Suggestion:

Update to version dev-feature/addon-thumbnails

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/ini-1.3.7 <dev-timber-v2

Fix Suggestion:

Update to version dev-timber-v2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/disableLazyfirstSlideOnly <dev-feature/displayAnchorIndexInSummary

Fix Suggestion:

Update to version dev-feature/displayAnchorIndexInSummary

davyin/dyniva_ui (PHP):

Affected version(s) =3.x-dev <dev-3.x-esbuild

Fix Suggestion:

Update to version dev-3.x-esbuild

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-addContributorinTeaser <dev-addHeroTitlesToPrintVersion

Fix Suggestion:

Update to version dev-addHeroTitlesToPrintVersion

dawehner/lazysizes (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

pi/pi (PHP):

Affected version(s) >=v2.6.0-beta1 <v2.8.0

Fix Suggestion:

Update to version v2.8.0

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/importDrilldown <dev-feature/improveAccessibility

Fix Suggestion:

Update to version dev-feature/improveAccessibility

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/woody_hawwwai_newitem <dev-feature/woodyseo_canonical_url

Fix Suggestion:

Update to version dev-feature/woodyseo_canonical_url

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/tmapsLibrary <dev-feature/topicsEnhanced

Fix Suggestion:

Update to version dev-feature/topicsEnhanced

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/upgradeSwiperVersion <dev-feature/woody-animations

Fix Suggestion:

Update to version dev-feature/woody-animations

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-fix/setLangOnRestApi <dev-fix/teaserTitle

Fix Suggestion:

Update to version dev-fix/teaserTitle

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/LoaderJS <dev-feature/MetaLangUsage

Fix Suggestion:

Update to version dev-feature/MetaLangUsage

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/addBlockTitlesToTabs <dev-feature/addCookieIconForCookiesBannerResponsive

Fix Suggestion:

Update to version dev-feature/addCookieIconForCookiesBannerResponsive

bpocallaghan/titan (PHP):

Affected version(s) >=1.0.5 <1.0.9

Fix Suggestion:

Update to version 1.0.9

chibko/contao-bootstrap (PHP):

Affected version(s) >=dev-master <=4.4.x-dev

Fix Suggestion:

Update to version no_fix

bpocallaghan/titan (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets_setup/ansi-html-and-webpack-dev-server--removed <dev-utils

Fix Suggestion:

Update to version dev-utils

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-bugfix/add-img-on-list_content <dev-bugfix/createdFrom-function

Fix Suggestion:

Update to version dev-bugfix/createdFrom-function

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/addMenusBloc <dev-feature/addMoreContextTools

Fix Suggestion:

Update to version dev-feature/addMoreContextTools

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/color-string-1.6.0 <dev-dependabot/npm_and_yarn/follow-redirects-1.14.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/follow-redirects-1.14.7

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/CheckSeoField <dev-feature/CleanupRewriteRules

Fix Suggestion:

Update to version dev-feature/CleanupRewriteRules

davyin/dyniva_ui (PHP):

Affected version(s) =2.x-dev <2.1.x-dev

Fix Suggestion:

Update to version 2.1.x-dev

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/newFuncHelperProcessSection <dev-feature/newSheetUpdate

Fix Suggestion:

Update to version dev-feature/newSheetUpdate

bpocallaghan/titan (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets_setup/url-parse-1.5.1 <dev-dependabot/npm_and_yarn/resources/assets_setup/url-parse-1.5.7

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/resources/assets_setup/url-parse-1.5.7

derhaeuptling/contao-lazy-images (PHP):

Affected version(s) >=2.0.0 <3.0.4

Fix Suggestion:

Update to version 3.0.4

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/flushOnSaveMenusOld <dev-feature/getPagePreviewJs

Fix Suggestion:

Update to version dev-feature/getPagePreviewJs

pi/pi (PHP):

Affected version(s) >=dev-laminas <v2.5.0-alpha1

Fix Suggestion:

Update to version v2.5.0-alpha1

madhouse/craft-starter (PHP):

Affected version(s) =1.0.0 <dev-andrewmenich-patch-1

Fix Suggestion:

Update to version dev-andrewmenich-patch-1

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/YarnDownload <dev-feature/add-alignement-choice-tabs-block

Fix Suggestion:

Update to version dev-feature/add-alignement-choice-tabs-block

tollwerk/tw-base (PHP):

Affected version(s) >=v3.1.0 <dev-typo3-9

Fix Suggestion:

Update to version dev-typo3-9

pressgang-wp/pressgang (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/handlebars-4.7.7 <=dev-dependabot/npm_and_yarn/y18n-4.0.1

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/messagesLumiplan <dev-feature/mixtGallery

Fix Suggestion:

Update to version dev-feature/mixtGallery

bpocallaghan/laravel-admin-starter (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/dns-packet-1.3.4 <dev-dependabot/npm_and_yarn/loader-utils-1.4.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/loader-utils-1.4.2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/singleProductTemplate <dev-feature/sitemap-inc

Fix Suggestion:

Update to version dev-feature/sitemap-inc

x-cart-proj/x-cart-proj (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/add-sheet-aspect-on-search <dev-feature/addBadgeForNewWoodyTpls

Fix Suggestion:

Update to version dev-feature/addBadgeForNewWoodyTpls

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/respCustomAcfmargins <dev-feature/responsiveOptions

Fix Suggestion:

Update to version dev-feature/responsiveOptions

davyin/dyniva_ui (PHP):

Affected version(s) >=0.x-dev <dev-1.x-dev-lzy

Fix Suggestion:

Update to version dev-1.x-dev-lzy

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-feature/updateEPagePreviewApi <dev-feature/updatePrintCss

Fix Suggestion:

Update to version dev-feature/updatePrintCss

derhaeuptling/contao-lazy-images (PHP):

Affected version(s) >=3.0.5 <3.0.7

Fix Suggestion:

Update to version 3.0.7

woody-wordpress/woody-theme (PHP):

Affected version(s) >=dev-misc/addBookingTabs <dev-newHawwwaiSheet

Fix Suggestion:

Update to version dev-newHawwwaiSheet

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/grunt-1.3.0 <dev-dependabot/npm_and_yarn/mixin-deep-1.3.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/mixin-deep-1.3.2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/favOnMEA <dev-feature/feature/primaryBtnVar

Fix Suggestion:

Update to version dev-feature/feature/primaryBtnVar

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/TmapsV2 <dev-feature/TouristicMapV2

Fix Suggestion:

Update to version dev-feature/TouristicMapV2

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-addWeatherImg <dev-addWiconClassToPageTerms

Fix Suggestion:

Update to version dev-addWiconClassToPageTerms

pressgang-wp/pressgang (PHP):

Affected version(s) =dev-blurUpFixes <dev-master

Fix Suggestion:

Update to version dev-master

simplon/component_mvc (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

woody-wordpress/woody-theme (PHP):

Affected version(s) =dev-feature/NewSw <dev-feature/RedirectPermalink

Fix Suggestion:

Update to version dev-feature/RedirectPermalink

Related Resources (1)

https://github.com/aFarkas/lazysizes/commit/3720ab8262552d4e063a38d8492f9490a231fd48

Do you need more information?

CVSS v4

Base Score:

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

HIGH

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE