Imgurl Project Imgurl — known CVE vulnerabilities

Every CVE whose affected-product data names Imgurl Project Imgurl, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-29305 — CVSS 8.1 (high): imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.
• CVE-2021-38713 — CVSS 5.4 (medium): imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.