Craftcms: >> Craft Cms >> 4.2.0.1 Security Vulnerabilities
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
CVSS Score
6.1
EPSS Score
0.008
Published
2023-03-03
Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label.
CVSS Score
5.4
EPSS Score
0.004
Published
2022-09-21
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.
CVSS Score
5.4
EPSS Score
0.005
Published
2022-09-16
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.
CVSS Score
5.4
EPSS Score
0.004
Published
2022-09-16
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-09-16
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-09-16
Page 6