Description
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | < 3.1.31 | 3.1.31 | GHSA-w5q4-q7wp-qww6 |
Medium · 6.1
CVE-2019-12823
EUVD-2022-5504GHSA-w5q4-q7wp-qww6
Craft CMS XSS Vulnerability
Published Jun 18, 2019 · Updated Aug 4, 2024 · Assigned by mitre