Lucene search
+L

1 matches found

OSV
OSV
added 2026/01/05 6:50 p.m.4 views

GHSA-255J-QW47-WJH5 Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Note that attackers must have administrator access to the Craft Control Panel for this to work. Users should update to the patched versions 5.8.21 and 4.16.17 to mitigate the issue. Resources: https://github.com/craftcms/cms/commit/6e608a1a5bfb36943f94f584b7548ca542a86fef...

8.6CVSS8.7AI score0.00843EPSS
SaveExploits1References7
Rows per page
Query Builder