Description

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

Remediation

References

CVE-2022-37247

Related Vulnerabilities

WordPress Plugin Theme Tuner 'tt-abspath' Parameter Remote File Include (0.7)

Oracle JRE CVE-2012-0551 Vulnerability (CVE-2012-0551)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)

Oracle Database Server CVE-2015-4923 Vulnerability (CVE-2015-4923)

PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5288)

Severity

Medium

Classification

CVE-2022-37247 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities