Skip to content
OpenAdvisories

Package · Packagist

austintoddj/canvas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2017-1000507

    Canvs Canvas XSS Vulnerability

    Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code.

    austintoddj/canvas Packagist
  • Medium 5.4
    CVE-2017-8298

    Canvs Canvas Cross-site Scripting (XSS) via title and content fields

    cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.

    austintoddj/canvas Packagist