CVE-2023-23927
Craft CMS stored cross-site scripting vulnerability
Résumé
Craft CMS stored cross-site scripting vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
craftcms/cms
[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.24"},{"fixed":"3.7.64"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web github.com
- web user-images.githubusercontent.com