CVE-2021-30134: Ht Slider Range For Amazon Affiliates Project Ht Slider Range For Amazon Affiliates

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

Affected products

• Ht Slider Range For Amazon Affiliates Project Ht Slider Range For Amazon Affiliates: before 1.1.6 (fixed in 1.1.6)
• PHP Curl Class Project PHP Curl Class: before 2.3.2 (fixed in 2.3.2)
• Ptwooplugins Invoicing With Invoicexpress For Woocommerce: before 3.0.3 (fixed in 3.0.3)
• Qiwi Woo-Qiwi-Payment-Gateway: up to and including 0.0.9
• Shopello API Project Shopello API: up to and including 2.9.0
• Teamleade Teamleader CRM Forms: before 2.1.0 (fixed in 2.1.0)

Published 2022-12-26. Last modified 2026-06-17.