2218 matches found
GHSA-WXVF-839F-JQMH Craft CMS Cross site Scripting vulnerability
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via src/helpers/Cp.php...
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Craft CMS 3.70-RC1–3.7.55.1 and 4.0.0-RC1–4.2.0.1 are vulnerable to Cross Site Scripting XSS via entry revisions and drafts. Versions 3.7.55.2 and 4.2.1 contain patches for this issue...
Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
GHSA-3CVM-7WRH-QRF9 Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
GHSA-MW37-WX8P-GP45 Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Craft CMS 3.70-RC1–3.7.55.1 and 4.0.0-RC1–4.2.0.1 are vulnerable to Cross Site Scripting XSS via entry revisions and drafts. Versions 3.7.55.2 and 4.2.1 contain patches for this issue...
CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
CVE-2022-37251
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...
CVE-2022-37251
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...
Cross site scripting
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...
Cross site scripting
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
CVE-2022-37251
Craft CMS 4.2.0.1 is affected by a Cross Site Scripting (XSS) vulnerability via Drafts/entry drafts. Multiple sources (NVD/NVD-derived CVE, GitHub GHSA advisory, Veracode entry, OSV entries, CVE lists, and related national vulnerabilities) corroborate that Craft CMS versions up to 4.2.0.1 (and ea...
CVE-2022-37251
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...
CVE-2022-37251
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...
CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
CVE-2022-37247
CVE-2022-37247 concerns Craft CMS 4.2.0.1 with a stored XSS on the /admin/settings/fields page. Multiple connected sources corroborate the issue, including Red Hat and Veracode entries. The Veracode description attributes the vulnerability to improper encoding in Cp.php affecting the _fldTabHtml ...
CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
Updated libtiff packages fix security vulnerability
libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parameters could cause a crash or in some cases, further exploitation. CVE-2022-2867...