Description
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.
Remediation
References
http://crafter.com
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2022-43430 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-for-total-test
CVE-2022-34207 Vulnerability in maven package org.jenkins-ci.plugins:beaker-builder
CVE-2016-7103 Vulnerability in maven package org.webjars.bower:jquery-ui
CVE-2021-41079 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2019-10091 Vulnerability in maven package org.apache.geode:geode-core