Beveiligingsadvies

CVE-2024-26482

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-22 00:00:00

Laatst bijgewerkt 2024-08-29 18:01:13

Toegewezen door mitre

CVSS-score 7.1

Status PUBLISHED

Beschrijving

An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is backend sanitization such that the reporter's mentioned "injecting malicious scripts" would not occur.

← Alle CVE's bekijken Bekijk op cve.org ↗