Lucene search
Veracode Vulnerability DatabaseVERACODE:36841HistoryAug 30, 2022 - 4:01 a.m.
Cross-site Scripting (XSS)
2022-08-3004:01:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
getkirby/cms
cross-site scripting
v-html tag
multiselectinput.vue
dynamic options
multi-select field
malicious javascript
vulnerability
EPSS
0.001
Percentile
32.3%
getkirby/cms is vulnerable to Cross-site Scripting (XSS). The use of the v-html tag in MultiselectInput.vue allows an attacker to inject and execute malicious javascript through the dynamic options in the multi-select field
Related
cvelist
cvelist
osv
osv
Cross-site scripting from dynamic options in the multiselect field
2022-08-29 17:34:36
CVE-2022-36037
2022-08-29 18:15:09
nvd
nvd
CVE-2022-36037
2022-08-29 18:15:09
prion
prion
Cross site scripting
2022-08-29 18:15:00
github
github
Cross-site scripting from dynamic options in the multiselect field
2022-08-29 17:34:36
cve
cve
CVE-2022-36037
2022-08-29 18:15:09