Description
Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | < 3.3.8 | 3.3.8 | GHSA-f3xr-q258-h7m9 |
Medium · 6.1
CVE-2019-17496
EUVD-2022-3678GHSA-f3xr-q258-h7m9
Craft CMS XSS Vulnerability
Published Oct 10, 2019 · Updated Aug 5, 2024 · Assigned by mitre