Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2022-37246

Disclosure Date: September 21, 2022 (last updated October 08, 2023)
Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label.
Attacker Value
Unknown

CVE-2022-37251

Disclosure Date: September 16, 2022 (last updated October 08, 2023)
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.
Attacker Value
Unknown

CVE-2022-37247

Disclosure Date: September 16, 2022 (last updated October 08, 2023)
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.
Attacker Value
Unknown

CVE-2022-37248

Disclosure Date: September 16, 2022 (last updated October 08, 2023)
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.
Attacker Value
Unknown

CVE-2022-37250

Disclosure Date: September 16, 2022 (last updated October 08, 2023)
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.