CVE-2022-37250

CVE-2022-37250 affects Craft CMS 4.2.0.1 with a Stored Cross-Site Scripting (XSS) in the admin path /admin/myaccount. The connected sources consistently describe a stored XSS condition but do not provide concrete technical details beyond the vulnerable location and vulnerability type, nor do they...

CVE-2022-37250

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

CVE-2022-37250

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

CVE-2022-37250

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

CVE-2022-37247: Improper Neutralization of Input During Web Page Generation

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...

PT-2022-23891

Name of the Vulnerable Software and Affected Versions Craft CMS version 4.2.0.1 Description The issue is related to a stored cross-site scripting XSS vulnerability. This occurs via the /admin/settings/fields page, allowing potential attackers to inject malicious scripts. Cross-site scripting XSS ...

PT-2022-23892

Name of the Vulnerable Software and Affected Versions Craft CMS version 4.2.0.1 Description The issue is related to Cross Site Scripting XSS via the file src/helpers/Cp.php. This allows for potential malicious script execution. Recommendations For Craft CMS version 4.2.0.1, consider restricting...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A cross-site scripting vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/myaccount page...

PT-2022-23894 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS version 4.2.0.1 Description: The issue is related to Stored Cross Site Scripting XSS in the "/admin/myaccount" API endpoint. This allows for malicious scripts to be stored and executed on the platform. Recommendations: For Craft CMS...

CVE-2022-37250: Improper Neutralization of Input During Web Page Generation

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting XSS in /admin/myaccount...

PT-2022-23895

Name of the Vulnerable Software and Affected Versions Craft CMS versions 3.70-RC1 through 3.7.55.1 Craft CMS versions 4.0.0-RC1 through 4.2.0.1 Description The issue is related to Cross Site Scripting XSS and can be exploited via entry revisions and drafts. Recommendations For Craft CMS versions...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & tonic, USA. A security vulnerability exists in Craft CMS version 4.2.0.1, which stems from a security issue on the /admin/settings/fields page...

CVE-2022-37248: Improper Neutralization of Input During Web Page Generation

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via src/helpers/Cp.php...

CVE-2022-37251: Improper Neutralization of Input During Web Page Generation

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting XSS via Drafts...

GHSA-G7XR-V82W-QGGQ Code Injection in SEOmatic

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution...

Code Injection in SEOmatic

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution...

GHSA-6HJC-M38H-7JHH Cross-site Scripting in SEOmatic plugin

A cross-site scripting XSS vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName...

Cross-site Scripting in SEOmatic plugin

A cross-site scripting XSS vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName...

CVE-2021-41750

A cross-site scripting XSS vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName...

CVE-2021-41750

A cross-site scripting XSS vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName...