Lucene search
HistorySep 16, 2022 - 10:15 p.m.
CVE-2022-37251
craft cms
cross site scripting
drafts
vulnerability
cve-2022-37251
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.
Affected configurations
Node
craftcmscraft_cmsMatch4.2.0.1
Related
prion
prion
Cross site scripting
2022-09-16 22:15:00
osv
osv
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
2022-09-17 00:00:30
CVE-2022-37251
2022-09-16 22:15:12
cvelist
cvelist
CVE-2022-37251
2022-09-16 20:54:16
veracode
veracode
Cross Site Scripting (XSS)
2022-09-19 08:27:25
cve
cve
CVE-2022-37251
2022-09-16 22:15:12
github
github
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
2022-09-17 00:00:30
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for NVD:CVE-2022-37251