Lucene search
Veracode Vulnerability DatabaseVERACODE:37125HistorySep 19, 2022 - 6:32 a.m.
Cross Site Scripting (XSS)
2022-09-1906:32:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross site scripting
craft cms
addresscardhtml
javascript
vulnerability
EPSS
0.001
Percentile
21.4%
craftcms/cms is vulnerable to cross-site scripting(XSS) attacks. The library does not properly escape user inputs through title parameter in addressCardHtml function, which allows an attacker to inject and execute malicious javascript on victim’s browser.
Related
nvd
nvd
CVE-2022-37250
2022-09-16 15:15:09
osv
osv
CVE-2022-37250
2022-09-16 15:15:09
Craft CMS Stored Cross-site Scripting in User Addresses Title
2022-09-17 00:00:36
cve
cve
CVE-2022-37250
2022-09-16 15:15:09
prion
prion
Cross site scripting
2022-09-16 15:15:00
github
github
Craft CMS Stored Cross-site Scripting in User Addresses Title
2022-09-17 00:00:36
cvelist
cvelist
CVE-2022-37250
2022-09-16 14:57:51