PT-2021-23219

Name of the Vulnerable Software and Affected Versions Kirby versions prior to 3.5.8 Description The issue concerns Kirby's blocks field, which stores structured data for each block, and this data is used in block snippets to convert blocks to HTML for use in templates. The default snippet for the...

CVE-2021-41258: Improper Neutralization of Input During Web Page Generation

Kirby is an open source file structured CMS. In affected versions Kirby's blocks field stores structured data for each block. This data is then used in block snippets to convert the blocks to HTML for use in your templates. We recommend to escape HTML special characters to protect against...