CVE-2024-26482

An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0 . While the reporter suggested that this could be used to inject malicious scripts, the vendor disputes this, stating that backend sanitization is in place to prevent script execution, even though certain...