CVE-2022-37247

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-09-16

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Craft Cms (Craftcms)

References

• https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
• https://labs.integrity.pt/advisories/cve-2022-37247/