Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37130
HistorySep 19, 2022 - 8:27 a.m.

Cross Site Scripting (XSS)

2022-09-1908:27:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.001 Low

EPSS

Percentile

22.9%

craftcms/cms is vulnerable to cross-site scripting. An attacker is able to introduce XSS payload in the Draft name, causing reflections of malicious script in a user’s browser.

CPENameOperatorVersion
craftcms/cmsle4.2.0.2
craftcms/cmsle4.2.0.2

0.001 Low

EPSS

Percentile

22.9%

Related for VERACODE:37130