Description
In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PiranhaCMS | Piranha | 7.0.0 – < unspecified, unspecified – ≤ 9.1.1 | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Piranha | >= 7.0.0, < 9.2.0 | 9.2.0 | GHSA-jvjp-vh27-r9h5 |