Craft CMS XSS Vulnerability

2022-05-1702:14:13

Google

osv.dev

0.001 Low

EPSS

Percentile

45.2%

JSON

Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

CPENameOperatorVersion
craftcms/cmseq1.3.0-alpha.2380
craftcms/cmseq2.6.2771
craftcms/cmseq2.3.0-alpha.2602
craftcms/cmseq1.4.0-alpha.2509
craftcms/cmseq1.2.0-alpha.2318
craftcms/cmseq2.5.2765
craftcms/cmseq1.2.2392
craftcms/cmseq2.2.2579
craftcms/cmseq1.4.0-alpha.2469
craftcms/cmseq1.3.0-alpha.2402

Name	Operator	Version
craftcms/cms	eq	1.3.0-alpha.2380
craftcms/cms	eq	2.6.2771
craftcms/cms	eq	2.3.0-alpha.2602
craftcms/cms	eq	1.4.0-alpha.2509
craftcms/cms	eq	1.2.0-alpha.2318
craftcms/cms	eq	2.5.2765
craftcms/cms	eq	1.2.2392
craftcms/cms	eq	2.2.2579
craftcms/cms	eq	1.4.0-alpha.2469
craftcms/cms	eq	1.3.0-alpha.2402