EUVD-2022-6790

Malicious code in bioql PyPI...

Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting. The vulnerability exists in the createNewElement function of BaseElementSelectInput.js due to a lack of sanitization in the elementInfo attribute, allowing an attacker to inject and execute malicious javascript...

Cross site scripting

Craft CMS 4.2.0.1 is affected by Cross Site Scripting XSS in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label...

CVE-2022-37246

Craft CMS 4.2.0.1 is affected by Cross Site Scripting XSS in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label...

PT-2022-23890 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS version 4.2.0.1 Description: The issue is related to Cross Site Scripting XSS in the file src/web/assets/cp/src/js/BaseElementSelectInput.js, specifically on the line label: elementInfo.label. This suggests a potential problem with...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from the US-based Pixel & tonic, Inc. A security vulnerability exists in Pixel & tonic Craft CMS version 4.2.0.1, which was discovered via src/web/assets/cp/src/js/BaseElementSelectInput.js to contain a cross-site scripting vulnerability...