Craft CMS craftcms Craft CMS any version

Craft Affected by Entries Authorship Spoofing via Mass Assignment

Craft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding

Craft CMS stores user-provided content in session files

Craft has a SSRF in GraphQL Asset Mutation via HTTP Redirect

Craft has a SSRF in GraphQL Asset Mutation via Alternative IP Notation

Craft CMS: Unauthenticated users could execute project configuration sync operations that should be restricted trusted users

Craft has an unauthenticated activation email trigger with potential user enumeration

Craft has Reflective XSS via incomplete return URL sanitization

Craft CMS's race condition in Token Service potentially allows for token usage greater than the token limit

Craft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload Mutation

Craft has a save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host

Cloud Metadata SSRF Protection Bypass via IPv6 Resolution

Craft CMS: Low-privilege users could read private asset contents when editing an asset (IDOR)

Craft CMS: Authorization bypass in "entries/move-to-section" allows control panel user to move entries without section permissions

Craft CMS vulnerable to potential information disclosure via unchecked asset relocation

An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.

Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.

Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.

Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments() and getActionSegments() need not be zero-based. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-8052.

Craft CMS before 2.6.2974 allows XSS attacks.

Craft CMS stored cross-site scripting vulnerability

Craft CMS before 3.6.13 has an XSS vulnerability.

Craft CMS XSS in RSS widget feed

Craft CMS before 3.7.29 allows XSS.

Craft CMS through 4.4.9 is vulnerable to HTML Injection.

Craft CMS vulnerable to cross site scripting in RSS feed widget

Craft CMS has Stored XSS in Table Field via "HTML" Column Type

Craft CMS stored XSS in indexedVolumes

Craft CMS stored XSS in review volume

Craft CMS stored XSS in breadcrumb list and title fields

Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively.

Cross Site Scripting (XSS) vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbitrary code during user creation.

Craft CMS Vulnerable to Stored XSS in Revision Context Menu

In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potentially exposing personal/geolocation data to the public.

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.

Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.

Craft CMS: Anonymous "generate transform" calls for assets can expose private assets via transform URL

Craft CMS has a Path Traversal Vulnerability in AssetsController

Craft has a Permission Bypass and IDOR in Duplicate Entry Action