Description
Craft CMS before 3.7.29 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | < 3.7.29 | 3.7.29 | GHSA-7xj5-fwqr-5378 |
Medium · 6.1
CVE-2022-28378
EUVD-2022-1671GHSA-7xj5-fwqr-5378
Cross-site Scripting in craftcms/cms
Published Apr 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre