CVE-2019-9554 | BDVDB-2026-128447 Detail

Description#

In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://packetstormsecurity.com/files/151944/Craft-CMS-3.1.12-Pro-Cross-Site-Scripting.html
https://www.exploit-db.com/exploits/46496

Exploit#

No public exploit known

History#

Version 12019-12-31Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.