Description
Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | >= 4.0.0-RC1, < 4.2.1 | 4.2.1 | GHSA-f546-v666-559x |
| Packagist | craftcms/cms | >= 3.7.39, < 3.7.51 | 3.7.51 | GHSA-f546-v666-559x |