CVE-2023-33194
1 advisory.
Packagist/craftcms/cms CVE-2023-33194: low 3.7
CraftCMS stored XSS in Quick Post widget error message
Action: Upgrade craftcms/cms to 3.8.6 or later.
composer require craftcms/cms:4.4.6composer require craftcms/cms:3.8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0-RC1 | 4.4.6 | - |
| 3.0.0 | 3.8.6 | - |
Fixed versions
| 4.4.6 | 3.8.6 |
Sources
- osv: GHSA-3wxg-w96j-8hq9
- https://github.com/craftcms/cms/security/advisories/GHSA-3wxg-w96j-8hq9
- https://nvd.nist.gov/vuln/detail/CVE-2023-33194
- https://github.com/craftcms/cms/commit/9d0cd0bda7c8a830a3373f8c0f06943e519ac888
- https://github.com/craftcms/cms
- https://github.com/craftcms/cms/releases/tag/4.4.6
CVE-2023-33194 · published · modified · JSON