Lucene search
+L

2 matches found

OSV
OSV
added 2023/07/28 3:35 p.m.32 views

GHSA-X5MR-P6V4-WP93 Field injection in the KirbyData text storage handler

TL;DR This vulnerability affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a contact or comment form. Your Kirby sites are not affected if they don't allow write access for...

7.1CVSS7.8AI score0.00924EPSS
SaveExploits0References9
Prion
Prion
added 2023/07/27 3:15 p.m.109 views

Information disclosure

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a...

6.5CVSS8.6AI score0.00924EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder