Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 3:4 p.m.19 views

Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

TL;DR This vulnerability affects Kirby sites and plugins that use the writer or list fields or that use $dom-sanitize, Sane::sanitize, Sane\Html::sanitize, Sane\Svg::sanitize, Sane\Xml::sanitize, Sane::sanitizeFile or $file-sanitizeContents with untrusted input. It was possible to inject maliciou...

8.5CVSS5.3AI score0.00409EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder