Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/09 8:36 p.m.11 views

GHSA-7JX7-3846-M7W7 Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Relationship to Previously Patched Vulnerability This vulnerability is in addition to the RCE vulnerability patched in GHSA-255j-qw47-wjh5. That advisory addressed a similar RCE vulnerability that affected two specific routes: - /index.php?p=admin%2Factions%2Ffields%2Fapply-layout-element-setting...

8.6CVSS6.3AI score0.0097EPSS
SaveExploits1References6
Rows per page
Query Builder