Packagist/getkirby/cms: high 7.1
Cross-site scripting from content entered in the tags and multiselect fields
Action: Upgrade getkirby/cms to 3.5.8.1 or later.
composer require getkirby/cms:3.5.8.1composer require getkirby/cms:3.6.6.1composer require getkirby/cms:3.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.7 | 3.5.8.1 | - |
| 3.6.0 | 3.6.6.1 | - |
| 3.7.0 | 3.7.4 | - |
Fixed versions
| 3.5.8.1 | 3.6.6.1 | 3.7.4 |
Sources
- osv: GHSA-rv3r-vqjj-8c76
- https://github.com/getkirby/kirby/security/advisories/GHSA-rv3r-vqjj-8c76
- https://github.com/getkirby/kirby
published · modified · JSON