Skip to content
OpenAdvisories
Unscored CVE-2023-38904 EUVD-2023-42665GHSA-h864-r66v-46rc

A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted paylo…

Published Aug 16, 2023 · Updated Oct 8, 2024 · Assigned by mitre

Description

A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function.

References