Headline
GHSA-mw37-wx8p-gp45: Craft CMS vulnerable to Cross-site Scripting via Drafts
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. Version 4.2.1 contains a patch for this issue.
Craft CMS vulnerable to Cross-site Scripting via Drafts
Moderate severity GitHub Reviewed Published Sep 17, 2022 • Updated Sep 20, 2022
Related news
CVE-2022-46496: CVE-2022-46496 - Missing TLS Certificate Validation in DoorEntry HOMETOUCH for iOS
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.
CVE-2022-37251: CVE-2022-37251 - Stored XSS in Drafts in Craft CMS
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.
CVE-2022-37250: CVE-2022-37250 - Stored XSS in User Addresses Title in Craft CMS
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.