Description

Craft CMS before 3.6.13 has an XSS vulnerability.

Remediation

References

CVE-2021-32470

Related Vulnerabilities

WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34008)

WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.25)

WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.9)

WordPress Plugin Permalink Manager Lite Cross-Site Request Forgery (2.2.20.1)

Severity

Medium

Classification

CVE-2021-32470 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities