CVE-2022-37247
https://notcve.org/view.php?id=CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. Craft CMS versión 4.2.0.1, es vulnerable a un ataque de tipo cross-site scripting (XSS) almacenado por medio de la página /admin/settings/fields • https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627 https://labs.integrity.pt/advisories/cve-2022-37247 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2022-37248
https://notcve.org/view.php?id=CVE-2022-37248
Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php. Craft CMS versión 4.2.0.1, es vulnerable a un ataque de tipo Cross Site Scripting (XSS) por medio del archivo src/helpers/Cp.php • https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627 https://labs.integrity.pt/advisories/cve-2022-37248 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2022-37250
https://notcve.org/view.php?id=CVE-2022-37250
Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount. Craft CMS versión 4.2.0.1, sufre de un ataque de tipo Cross Site Scripting (XSS) Almacenado en /admin/myaccount • https://github.com/craftcms/cms/commit/cdc9cb66d0716c9552e4113c8e426fd1a31f9516 https://labs.integrity.pt/advisories/cve-2022-37250 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •