medium6.1Public exploit code
CVE-2019-9554
In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Craft CMS 3.1.12 Pro - Cross-Site Scripting2019-03-04 · webapps · php
Impact
In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftcms | Craft Cms | Version 3.1.12 |