CVE-2017-8385

Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message...

Craft CMS Cross-Site Scripting Vulnerability

Craft CMS is a content management system CMS developed by Craft. A cross-site scripting vulnerability exists in Craft CMS versions prior to 2.6.2974. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-8052

Craft CMS before 2.6.2974 allows XSS attacks...

CVE-2017-8052

Craft CMS before 2.6.2974 allows XSS attacks...

Cross site scripting

Craft CMS before 2.6.2974 allows XSS attacks...

CVE-2017-8052

Craft CMS before 2.6.2974 allows XSS attacks...

CVE-2017-8052

CVE-2017-8052 affects Craft CMS prior to 2.6.2974, enabling XSS. The vulnerability arises in Craft’s handling of user-supplied input; the initial entry assigns a MEDIUM base CVSS (6.1) on CVSS3, with network vector and user interaction required. Public references tie the issue to an incomplete fi...