ipl/web vulnerabilities (Packagist)

2 vulnerabilities.

• ipl/web Packagist ipl/web is vulnerable to reflected XSS by malformed search requests CVE-2026-42224 Fix available 7.6 HighApril 29, 2026
• ipl/web Packagist ipl/web susceptible to Cross-Site Request Forgery (CSRF) CVE-2024-41811 Fix available 3.9 LowAugust 5, 2024