Medium · 5.4 CVE-2017-8298 EUVD-2022-2117GHSA-3657-q433-mmpx

Canvs Canvas Cross-site Scripting (XSS) via title and content fields

Published Apr 27, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.

Ecosystem	Package	Affected	Fixed	Record
Packagist	austintoddj/canvas	3.3.0	—	GHSA-3657-q433-mmpx