~ / search / GHSA-wv7j-rc2q-9j67

GHSA-wv7j-rc2q-9j67

Cross Site Scripting in CraftCMS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-30177

Packages

EcosystemPackageAffectedFixed in
Packagist craftcms/cms < 3.7.68 3.7.68

Details

As written in the advisory (Markdown source, shown as plain text).

CraftCMS prior to version 3.7.68 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.

References

External links from the advisory. They lead to third-party sites.