Kirby cross-site scripting vulnerability

Kirby is a file-based content management system CMS. A cross-site scripting vulnerability exists in Kirby versions prior to 3.5.8.1, which can be exploited by an attacker to inject HTML code into an option source, such as the content of a sibling page or an API endpoint...