~ / search / GHSA-3cvm-7wrh-qrf9

GHSA-3cvm-7wrh-qrf9

Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-37247

Packages

EcosystemPackageAffectedFixed in
Packagist craftcms/cms >= 4.0.0-RC1, < 4.2.1 4.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

References

External links from the advisory. They lead to third-party sites.