EPSS
Percentile
24.8%
getkirby/kirby is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victimβs browser via the title of a new page.
github.com/security-breachlock/CVE-2018-16624/blob/master/CVE-2018-16624.pdf