2026 matches found
Cross site scripting
Craft CMS before 2.6.2974 allows XSS attacks...
CVE-2017-8052
Craft CMS before 2.6.2974 allows XSS attacks...
CVE-2017-8052
Craft CMS before 2.6.2974 allows XSS attacks...
CVE-2017-8052
CVE-2017-8052 affects Craft CMS prior to 2.6.2974, enabling XSS. The vulnerability arises in Craft’s handling of user-supplied input; the initial entry assigns a MEDIUM base CVSS (6.1) on CVSS3, with network vector and user interaction required. Public references tie the issue to an incomplete fi...
PT-2017-18092
Name of the Vulnerable Software and Affected Versions Craft CMS versions prior to 2.6.2974 Description The issue allows for XSS attacks. Recommendations For versions prior to 2.6.2974, update to version 2.6.2974 or later to resolve the issue...