CVE-2022-41938
1 advisory.
Packagist/flarum/core CVE-2022-41938: critical 9
Cross site scripting vulnerability with discussion titles
Action: Upgrade flarum/core to 1.6.2 or later.
composer require flarum/core:1.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.6.2 | - |
Fixed versions
| 1.6.2 |
Sources
- osv: GHSA-7x4w-j98p-854x
- https://github.com/flarum/framework/security/advisories/GHSA-7x4w-j98p-854x
- https://nvd.nist.gov/vuln/detail/CVE-2022-41938
- https://github.com/flarum/framework/commit/690de9ce0ffe7ac4d45b73e303f44340c3433138
- https://discuss.flarum.org/d/27558
- https://github.com/flarum/framework
CVE-2022-41938 · published · modified · JSON