~ / search / GHSA-7xj5-fwqr-5378

GHSA-7xj5-fwqr-5378

Cross-site Scripting in craftcms/cms

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-28378

Packages

EcosystemPackageAffectedFixed in
Packagist craftcms/cms < 3.7.29 3.7.29

Details

As written in the advisory (Markdown source, shown as plain text).

Craft CMS before 3.7.29 allows cross-site scripting.

References

External links from the advisory. They lead to third-party sites.