Cross-site Scripting (XSS)

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the ElementTableSorter.js process when a user with sufficient permissions drags an entry under a maliciously crafted entry in table view. An attacker can execute...