Packagist/getkirby/cms CVE-2025-65012: medium 5.4, EPSS 0.20%

Kirby CMS has cross-site scripting (XSS) in the changes dialog

Action: Upgrade getkirby/cms to 5.1.4 or later.

composer require getkirby/cms:5.1.4

Affected

Fixed versions

Sources

• osv: GHSA-84hf-8gh5-575j
• nvd: CVE-2025-65012
• https://github.com/getkirby/kirby/security/advisories/GHSA-84hf-8gh5-575j
• https://github.com/getkirby/kirby
• https://github.com/getkirby/kirby/releases/tag/5.1.4

CVE-2025-65012 · published 2025-11-18T18:01:25Z · modified 2025-11-20T10:33:29.038926Z · JSON