3 matches found
CVE-2018-16624
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
5.4CVSS5.3AI score0.00684EPSS
SaveExploits1References1
CVE-2018-16624: Improper Neutralization of Input During Web Page Generation
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...
5.4CVSS5.8AI score0.00684EPSS
SaveExploits1References2
PT-2019-9359
Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue allows for XSS via the title of a new page, specifically affecting the 'panel/pages/home/edit' endpoint. Recommendations For version 2.5.12, update to a newer version that contains a fix for this issu...
5.4CVSS0.00684EPSS
SaveExploits1References3
20