Plank Laravel-Mediable
5 CVEs affecting Plank Laravel-Mediable. Latest disclosed: 2026-07-13. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-4809 | Critical | 9.8 | 2026-03-26 | plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-suppli… |
CVE-2026-49972 | High | 8.8 | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file w… |
CVE-2026-49970 | High | 8.8 | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arb… |
CVE-2026-49969 | High | 7.4 | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the serve… |
CVE-2026-49971 | Medium | 6.1 | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript… |