Lucene search

K
osvGoogleOSV:GHSA-72PF-CVWQ-VGQG
HistoryMay 14, 2022 - 1:20 a.m.

Craft CMS Cross-site Scripting (XSS) Vulnerability

2022-05-1401:20:01
Google
osv.dev
4

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%