Skip to content
OpenAdvisories

Package · Packagist

craftcms/cms

127 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-20418 Public exploit

    Craft CMS Cross-site Scripting (XSS) Vulnerability

    index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

    craftcms/cms Packagist
  • Medium 5.4
    CVE-2017-9516 Public exploit

    Craft CMS XSS Vulnerability

    Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

    craftcms/cms Packagist