Packagist/craftcms/cms CVE-2021-27902: medium 6.1, EPSS 0.99%

Craft CMS Cross-site Scripting Vulnerability

Action: Upgrade craftcms/cms to 3.6.0 or later.

composer require craftcms/cms:3.6.0

Affected

Fixed versions

Sources

• osv: GHSA-3jxh-789f-p7m6
• https://nvd.nist.gov/vuln/detail/CVE-2021-27902
• https://github.com/craftcms/cms/commit/8ee85a8f03c143fa2420e7d6f311d95cae3b19ce
• https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#360---2021-01-26
• https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#security-1

CVE-2021-27902 · published 2021-07-02T18:36:31Z · modified 2024-02-16T08:11:53.330418Z · JSON