Description
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | >= 4.0.0-RC1, < 4.2.1 | 4.2.1 | GHSA-8r89-x93x-mjq2 |
Medium · 5.4
CVE-2022-37250
EUVD-2022-6747GHSA-8r89-x93x-mjq2
Craft CMS Stored Cross-site Scripting in User Addresses Title
Published Sep 16, 2022 · Updated Jun 3, 2025 · Assigned by mitre