TI-2019-15334 CVE-2019-25280 · GHSA-mmmw-7m5w-3rc3Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed ParameterPriority MEDIUM 56Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter.CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00284 · Published 2026-01-07 · No fix listed CWE-79