Search for packages
| purl | pkg:composer/craftcms/cms@4.2.0%2B1 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-27cr-w1um-d3e5
Aliases: CVE-2022-37248 GHSA-wxvf-839f-jqmh |
Craft CMS Cross site Scripting vulnerability Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via `src/helpers/Cp.php`. |
Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 0 other vulnerabilities. Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-6gwq-1fda-xkcj
Aliases: CVE-2022-37246 GHSA-f546-v666-559x |
Craft CMS Cross-site Scripting vulnerability Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line `label: elementInfo.label`. |
Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 0 other vulnerabilities. Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-6h71-zkte-v3ev
Aliases: CVE-2022-37250 GHSA-8r89-x93x-mjq2 |
Craft CMS Stored Cross-site Scripting in User Addresses Title Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in `/admin/myaccount`. |
Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 0 other vulnerabilities. Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-91sx-dk5s-dycz
Aliases: CVE-2022-37247 GHSA-3cvm-7wrh-qrf9 |
Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. |
Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 0 other vulnerabilities. Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-van9-c9qy-5bh5
Aliases: CVE-2022-37251 GHSA-mw37-wx8p-gp45 |
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts Craft CMS `3.70-RC1`–`3.7.55.1` and `4.0.0-RC1`–`4.2.0.1` are vulnerable to Cross Site Scripting (XSS) via entry revisions and drafts. Versions `3.7.55.2` and `4.2.1` contain patches for this issue. |
Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 0 other vulnerabilities. Affected by 58 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||