Artfical
Security Intelligence
Türkçe
English
Deutsch
Français
Español
Русский
العربية
中文
日本語
한국어
Português
Italiano
فارسی
हिन्दी
Nederlands
Polski
Українська
Ελληνικά
Azərbaycan
Svenska
Indonesia
Tiếng Việt
ภาษาไทย
Română
Čeština
Magyar
עברית
Suomi
Norsk
Dansk
← Database
CVE-2022-37248
MEDIUM
CVSS:
5.4
Published: 2022-09-16
Modified: 2026-06-17
Description
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.
Affected Platforms
Craftcms Craft Cms
Weakness Type
CWE-79
References
https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
https://labs.integrity.pt/advisories/cve-2022-37248/
https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
https://labs.integrity.pt/advisories/cve-2022-37248/