CVE-2023-33195
Craft CMS XSS in RSS widget feed
Résumé
Craft CMS XSS in RSS widget feed
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com