Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22241
HistoryJan 02, 2020 - 7:56 a.m.

Cross-site Scripting (XSS)

2020-01-0207:56:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

58.9%

craftcms is vulnerable to cross-site scripting (XSS). The vulnerability exists because it does not handle the header insertion field when adding source code at an s/admin/entries/news/new URI.

EPSS

0.002

Percentile

58.9%