CVE-2023-31144
Craft CMS vulnerable to cross site scripting in RSS feed widget
Résumé
Craft CMS vulnerable to cross site scripting in RSS feed widget
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Craft CMS is a content management system. Starting in version 3.0.0 and prior to versions 3.8.4 and 4.4.4, a malformed title in the feed widget can deliver a cross-site scripting payload. This issue is fixed in version 3.8.4 and 4.4.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com