medium5.4
CVE-2023-38904
A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body param…
Impact
A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Decapcms | Netlify Cms | Version 2.10.192 |