PT-2019-19705

Name of the Vulnerable Software and Affected Versions Craft CMS version 3.1.12 Description A cross-site scripting XSS issue has been found in the header insertion field when adding source code at the "/s/admin/entries/news/new" API endpoint. Recommendations For Craft CMS version 3.1.12, update to...

CVE-2019-9554: Improper Neutralization of Input During Web Page Generation

In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI...