Design/Logic Flaw

2021-12-0216:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.

CPENameOperatorVersion
crafter_cmsge3.1.0
crafter_cmslt3.1.12

CPE	Name	Operator	Version
	crafter_cms	ge	3.1.0
	crafter_cms	lt	3.1.12

References

docs.craftercms.org/en/3.1/security/advisory.html