medium6.1
CVE-2022-28378
Cross-site Scripting in craftcms/cms
Impact
Craft CMS before 3.7.29 allows cross-site scripting.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | craftcms/cms | < 3.7.29 | 3.7.29 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftcms | Craft Cms | before 3.7.29 |