Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-27902 EUVD-2021-1437GHSA-3jxh-789f-p7m6

Craft CMS Cross-site Scripting Vulnerability

Published Jun 30, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist craftcms/cms < 3.6.0 3.6.0 GHSA-3jxh-789f-p7m6

References