Kirby Cross-Site Scripting Vulnerability (CNVD-2021-48509)

Kirby is a document-based content management system CMS. A cross-site scripting vulnerability exists in Kirby 3.5.5 and 3.5.6, which stems from the panel's "ListItem" component e.g., used in page and file sections displaying HTML as-is in page headers, and can be exploited by an attacker to condu...