GHSA-28H4-788G-RH42 Craft CMS vulnerable to stored XSS in breadcrumb list and title fields

Summary Multiple Stored XSS can be triggered by the breadcrumb list and title fields with user input. Details 1. In the /admin/categories page, category title isn't sanitized and triggered xss. 2. In the category edit page under the /admin/categories/, category title in breadcrumb list isn't...

CVE-2024-45406 Craft CMS stored XSS in breadcrumb list and title fields

Craft is a content management system CMS. Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input...

CVE-2024-45406

Summary: CVE-2024-45406 affects Craft CMS (5.x). The vulnerability is a stored XSS in breadcrumb list and title fields that can be triggered by user input. This is documented across multiple sources (CVE entries, GHSA advisory, and OSV/NVD mirrors) and is described as a stored XSS impacting Craft...

PT-2024-31610

Name of the Vulnerable Software and Affected Versions: Craft CMS 5 affected versions not specified Description: The issue is related to stored XSS that can be triggered by the breadcrumb list and title fields with user input. Malicious users can tamper with the control panel. The vulnerability ca...

CVE-2024-45406: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Craft is a content management system CMS. Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input...