Description
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | >= 4.0.0-RC1, < 4.2.1 | 4.2.1 | GHSA-wxvf-839f-jqmh |
Medium · 5.4
CVE-2022-37248
EUVD-2022-6971GHSA-wxvf-839f-jqmh
Craft CMS Cross site Scripting vulnerability
Published Sep 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre