Description
CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | craftcms/cms | < 3.7.68 | 3.7.68 | GHSA-wv7j-rc2q-9j67 |
Medium · 6.1
CVE-2023-30177
GHSA-wv7j-rc2q-9j67
Cross Site Scripting in CraftCMS
Published Apr 25, 2023 · Updated Feb 3, 2025 · Assigned by mitre