Lucene search
Veracode Vulnerability DatabaseVERACODE:37135HistorySep 19, 2022 - 9:15 a.m.
Cross-site Scripting (XSS)
2022-09-1909:15:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
19.5%
craftcms/cms is vulnerable to cross-site scripting. The vulnerability exists because the _fldTabHtml and _fldFieldSelectorsHtml functions of Cp.php does not properly encode the tab and groupName parameters, allowing an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| craftcms/cms | le | 4.2.0.2 | |
| craftcms/cms | le | 4.2.0.2 |
Related
osv
osv
CVE-2022-37247
2022-09-16 22:15:12
cve
cve
CVE-2022-37247
2022-09-16 22:15:12
prion
prion
Cross site scripting
2022-09-16 22:15:00
nvd
nvd
CVE-2022-37247
2022-09-16 22:15:12
cvelist
cvelist
CVE-2022-37247
2022-09-16 20:27:42
github
github