Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d4qw-kfph-3uc3
Summary
Craft CMS vulnerable to stored XSS in breadcrumb list and title fields
Multiple Stored XSS can be triggered by the breadcrumb list and title fields with user input.
Aliases
0
alias CVE-2024-45406
1
alias GHSA-28h4-788g-rh42
Fixed_packages
0
url pkg:composer/craftcms/cms@5.1.2
purl pkg:composer/craftcms/cms@5.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-e94m-mj1k-8kbr
22
vulnerability VCID-eaxm-rjr7-xudb
23
vulnerability VCID-efwv-r3nc-73h9
24
vulnerability VCID-esma-wxje-eqh3
25
vulnerability VCID-fpea-e48p-kfbn
26
vulnerability VCID-fpke-p7sz-nfc9
27
vulnerability VCID-gzry-xtu5-ukhu
28
vulnerability VCID-h6t5-pdp5-8qhe
29
vulnerability VCID-hkp9-3hzv-quhk
30
vulnerability VCID-hyct-5gap-7kdu
31
vulnerability VCID-jeyh-3jxd-z3g6
32
vulnerability VCID-jsfs-azcs-mfcm
33
vulnerability VCID-jxet-d8ux-mkge
34
vulnerability VCID-jxz8-g6fq-dubw
35
vulnerability VCID-kbrc-85av-nfcn
36
vulnerability VCID-m5rf-usae-yfb7
37
vulnerability VCID-nmzu-mefv-tqeh
38
vulnerability VCID-p9py-2d5t-cbe7
39
vulnerability VCID-pgm4-svq8-tfc5
40
vulnerability VCID-ppet-ruae-1kav
41
vulnerability VCID-qq68-3j4y-47am
42
vulnerability VCID-qywv-vf4r-8bh9
43
vulnerability VCID-r5hp-5nju-9ubz
44
vulnerability VCID-rb7c-3nkc-gkeg
45
vulnerability VCID-rzq4-h1ms-nqef
46
vulnerability VCID-sa99-8awj-eycd
47
vulnerability VCID-twuy-wzb7-k7g3
48
vulnerability VCID-tzjk-x116-ayge
49
vulnerability VCID-vasz-rnn1-67ev
50
vulnerability VCID-vvhc-rnpr-ubey
51
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.1.2
Affected_packages
0
url pkg:composer/craftcms/cms@5.0.0
purl pkg:composer/craftcms/cms@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.0
1
url pkg:composer/craftcms/cms@5.0.1
purl pkg:composer/craftcms/cms@5.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.1
2
url pkg:composer/craftcms/cms@5.0.2
purl pkg:composer/craftcms/cms@5.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.2
3
url pkg:composer/craftcms/cms@5.0.3
purl pkg:composer/craftcms/cms@5.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.3
4
url pkg:composer/craftcms/cms@5.0.4
purl pkg:composer/craftcms/cms@5.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.4
5
url pkg:composer/craftcms/cms@5.0.5
purl pkg:composer/craftcms/cms@5.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.5
6
url pkg:composer/craftcms/cms@5.0.6
purl pkg:composer/craftcms/cms@5.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.0.6
7
url pkg:composer/craftcms/cms@5.1.0
purl pkg:composer/craftcms/cms@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.1.0
8
url pkg:composer/craftcms/cms@5.1.1
purl pkg:composer/craftcms/cms@5.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1468-4fdx-kbfr
1
vulnerability VCID-1mb5-28xp-ckd2
2
vulnerability VCID-39ct-cg7w-kyb6
3
vulnerability VCID-41uv-1axm-fugb
4
vulnerability VCID-4wkr-jx1w-77hn
5
vulnerability VCID-5cxe-tjpb-3qan
6
vulnerability VCID-5mnd-qvaq-k3am
7
vulnerability VCID-5q5g-jrxm-eyhe
8
vulnerability VCID-71sv-62m4-z3er
9
vulnerability VCID-7y4f-ef7t-47eb
10
vulnerability VCID-83rt-3tyj-qbgx
11
vulnerability VCID-8u2j-17a4-q7eh
12
vulnerability VCID-9ca4-tbhq-27ad
13
vulnerability VCID-9enr-b6zd-mbh8
14
vulnerability VCID-a3b5-pwyh-yugv
15
vulnerability VCID-akrv-yqnf-1kg8
16
vulnerability VCID-asek-4gme-gug8
17
vulnerability VCID-azr5-12f8-hfbm
18
vulnerability VCID-c2nk-y4rx-1qf4
19
vulnerability VCID-chep-xthg-zuee
20
vulnerability VCID-cys8-jnmu-77ec
21
vulnerability VCID-d4qw-kfph-3uc3
22
vulnerability VCID-e94m-mj1k-8kbr
23
vulnerability VCID-eaxm-rjr7-xudb
24
vulnerability VCID-efwv-r3nc-73h9
25
vulnerability VCID-esma-wxje-eqh3
26
vulnerability VCID-fpea-e48p-kfbn
27
vulnerability VCID-fpke-p7sz-nfc9
28
vulnerability VCID-gzry-xtu5-ukhu
29
vulnerability VCID-h6t5-pdp5-8qhe
30
vulnerability VCID-hkp9-3hzv-quhk
31
vulnerability VCID-hyct-5gap-7kdu
32
vulnerability VCID-jeyh-3jxd-z3g6
33
vulnerability VCID-jsfs-azcs-mfcm
34
vulnerability VCID-jxet-d8ux-mkge
35
vulnerability VCID-jxz8-g6fq-dubw
36
vulnerability VCID-kbrc-85av-nfcn
37
vulnerability VCID-m5rf-usae-yfb7
38
vulnerability VCID-nmzu-mefv-tqeh
39
vulnerability VCID-p9py-2d5t-cbe7
40
vulnerability VCID-pgm4-svq8-tfc5
41
vulnerability VCID-ppet-ruae-1kav
42
vulnerability VCID-qq68-3j4y-47am
43
vulnerability VCID-qywv-vf4r-8bh9
44
vulnerability VCID-r5hp-5nju-9ubz
45
vulnerability VCID-rb7c-3nkc-gkeg
46
vulnerability VCID-rzq4-h1ms-nqef
47
vulnerability VCID-sa99-8awj-eycd
48
vulnerability VCID-twuy-wzb7-k7g3
49
vulnerability VCID-tzjk-x116-ayge
50
vulnerability VCID-vasz-rnn1-67ev
51
vulnerability VCID-vvhc-rnpr-ubey
52
vulnerability VCID-w9yn-1573-hyau
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/craftcms/cms@5.1.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45406
reference_id
reference_type
scores
0
value 0.00305
scoring_system epss
scoring_elements 0.5403
published_at 2026-06-08T12:55:00Z
1
value 0.00305
scoring_system epss
scoring_elements 0.54053
published_at 2026-06-07T12:55:00Z
2
value 0.00305
scoring_system epss
scoring_elements 0.54064
published_at 2026-06-06T12:55:00Z
3
value 0.00305
scoring_system epss
scoring_elements 0.54056
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45406
1
reference_url https://github.com/craftcms/cms
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/craftcms/cms
2
reference_url https://github.com/craftcms/cms/commit/b7348942f8131b3868ec6f46d615baae50151bb8
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-09T19:58:18Z/
url https://github.com/craftcms/cms/commit/b7348942f8131b3868ec6f46d615baae50151bb8
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45406
reference_id CVE-2024-45406
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45406
4
reference_url https://github.com/advisories/GHSA-28h4-788g-rh42
reference_id GHSA-28h4-788g-rh42
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-28h4-788g-rh42
5
reference_url https://github.com/craftcms/cms/security/advisories/GHSA-28h4-788g-rh42
reference_id GHSA-28h4-788g-rh42
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-09T19:58:18Z/
url https://github.com/craftcms/cms/security/advisories/GHSA-28h4-788g-rh42
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 80
name Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
description The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as <, >, and & that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d4qw-kfph-3uc3