CVE-2022-37247

Description

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
• https://labs.integrity.pt/advisories/cve-2022-37247/
• https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
• https://labs.integrity.pt/advisories/cve-2022-37247/