Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/18 3:4 p.m.9 views

GHSA-WR9H-4R83-F4V6 Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`

TL;DR This vulnerability affects Kirby sites and plugins that use the writer or list fields or that use $dom-sanitize, Sane::sanitize, Sane\Html::sanitize, Sane\Svg::sanitize, Sane\Xml::sanitize, Sane::sanitizeFile or $file-sanitizeContents with untrusted input. It was possible to inject maliciou...

8.5CVSS5.3AI score0.00409EPSS
SaveExploits0References4
Rows per page
Query Builder