CVE-2021-27903

An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites that did not restrict administrative changes if an attacker were somehow able to hijack an administrator's session...

CVE-2021-27902

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads...

CVE-2021-27902

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads...

CVE-2021-27902

CVE-2021-27902 affects Craft CMS prior to 3.6.0. The connected documents describe a cross-site scripting (XSS) vulnerability in a front-end form that accepts user uploads. The root cause details and exploitation specifics are not provided in the documents. Scope is limited toCraft CMS versions be...

CVE-2021-27903: Missing Authorization

An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites that did not restrict administrative changes if an attacker were somehow able to hijack an administrator's session...

Pixel＆tonic Craft CMS 代码注入漏洞

Craft CMS is a content management system for developers, designers and web professionals that provides flexibility, power and ease of use. A remote code execution vulnerability exists in Craft CMS versions prior to 3.6.7 without restricting administrator changes. An attacker can exploit this...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Craft CMS is a content management system for developers, designers and web professionals that provides flexibility, power and ease of use. A cross-site scripting vulnerability exists in a front-end form that accepts user uploads in versions of Craft CMS prior to 3.6.0. Detailed vulnerability...

PT-2021-17657

Name of the Vulnerable Software and Affected Versions: Craft CMS versions prior to 3.6.7 Description: A potential Remote Code Execution issue existed in certain circumstances on sites that did not restrict administrative changes, particularly if an attacker could hijack an administrator's session...

PT-2021-17656

Name of the Vulnerable Software and Affected Versions: Craft CMS versions prior to 3.6.0 Description: An issue was discovered in connection with front-end forms that accepted user uploads, potentially leading to a XSS vulnerability in certain circumstances. Recommendations: For versions prior to...

CVE-2021-27902: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2021-40321)

Craft CMS is a content management system for developers, designers and web professionals that provides flexibility, power and ease of use. A cross-site scripting vulnerability exists in Craft CMS versions prior to 3.6.13. No details of the vulnerability are provided at this time...

CVE-2021-32470

Craft CMS before 3.6.13 has an XSS vulnerability...

CVE-2021-32470

Craft CMS before 3.6.13 has an XSS vulnerability...

Cross site scripting

Craft CMS before 3.6.13 has an XSS vulnerability...

CVE-2021-32470

Craft CMS before 3.6.13 has an XSS vulnerability...

CVE-2021-32470

Craft CMS before 3.6.13 has an XSS vulnerability...

CVE-2021-32470

Craft CMS before 3.6.13 has an XSS vulnerability...

CVE-2021-32470

Craft CMS CVE-2021-32470 is an XSS vulnerability affecting Craft CMS versions prior to 3.6.13. The issue is that input/output handling allows cross-site scripting, potentially impacting users who load crafted content. A fixed release is 3.6.13; upgrade to that version to mitigate. No exploitation...

CVE-2021-32470: Improper Neutralization of Input During Web Page Generation

Craft CMS before 3.6.13 has an XSS vulnerability...

PT-2021-19718

Name of the Vulnerable Software and Affected Versions: Craft CMS versions prior to 3.6.13 Description: The issue is related to an XSS vulnerability. Recommendations: For versions prior to 3.6.13, update to version 3.6.13 or later to resolve the issue...