CVE-2017-15682 | BDVDB-2026-145197 Detail

Description#

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.craftercms.org/en/3.0/security/advisory.html

Exploit#

No public exploit known

History#

Version 12020-11-27Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.