Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-33194
3.7
LOWCVSS v3
Published
May 26, 2023
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was patched in version 4.4.6.
craftcms/cms
GitHubBuild bespoke content experiences with Craft.
GitHubBuild bespoke content experiences with Craft.>= 4.0.0-RC1, < 4.4.6, >= 3.0.0, < 3.8.6NVD
craftercms/craftercmsGitHubParent project for Crafter CMS. Issue tracking across all repositories and global builds.
GitHubParent project for Crafter CMS. Issue tracking across all repositories and global builds.= 4.0.0NVD