Packagist/flarum/core CVE-2022-41938: critical 9, EPSS 0.75%

Cross site scripting vulnerability with discussion titles

Action: Upgrade flarum/core to 1.6.2 or later.

composer require flarum/core:1.6.2

Affected

Fixed versions

Sources

• osv: GHSA-7x4w-j98p-854x
• https://github.com/flarum/framework/security/advisories/GHSA-7x4w-j98p-854x
• https://nvd.nist.gov/vuln/detail/CVE-2022-41938
• https://github.com/flarum/framework/commit/690de9ce0ffe7ac4d45b73e303f44340c3433138
• https://discuss.flarum.org/d/27558
• https://github.com/flarum/framework

CVE-2022-41938 · published 2022-11-21T23:53:32Z · modified 2023-11-08T04:10:36.609534Z · JSON