Craft CMS Cross-site Scripting Vulnerability

2021-07-0218:36:31

Google

osv.dev

0.001 Low

EPSS

Percentile

31.9%

JSON

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.

CPENameOperatorVersion
craftcms/cmseq2.6.2771
craftcms/cmseq2.6.3000
craftcms/cmseq2.7.7.3
craftcms/cmseq2.8.0.1
craftcms/cmseq3.0.31
craftcms/cmseq1.2.2392
craftcms/cmseq2.2.2579
craftcms/cmseq3.6.0-RC4
craftcms/cmseq3.3.0
craftcms/cmseq1.3.0-alpha.2401

Name	Operator	Version
craftcms/cms	eq	2.6.2771
craftcms/cms	eq	2.6.3000
craftcms/cms	eq	2.7.7.3
craftcms/cms	eq	2.8.0.1
craftcms/cms	eq	3.0.31
craftcms/cms	eq	1.2.2392
craftcms/cms	eq	2.2.2579
craftcms/cms	eq	3.6.0-RC4
craftcms/cms	eq	3.3.0
craftcms/cms	eq	1.3.0-alpha.2401