All packages
Craft CMS vulnerabilities
102 known CVE vulnerabilities in Craft CMS, translated and rated.
- CVE-2023-33197Medium
Craft is a content management system (CMS) for creating custom digital experiences on the web. A cross-site scripting (XSS) vulnerability has been identified that can be triggered via the Update Asset Index utility. This issue has been patched in version 4.4.6.
- CVE-2022-37251Medium
Craft CMS version 4.2.0.1 is vulnerable to Cross-Site Scripting (XSS) via the Drafts feature. An attacker can inject a malicious script that will be executed in the victim's browser.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS