What is GHSA-m3v5-gjj9-rg24?

GHSA-m3v5-gjj9-rg24 is a security advisory published by GitHub Security Advisories with Medium severity. Craft CMS vulnerable to HTML injection

Which CVE IDs does GHSA-m3v5-gjj9-rg24 cover?

GHSA-m3v5-gjj9-rg24 covers the following CVE IDs: CVE-2023-33495. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m3v5-gjj9-rg24?

GHSA-m3v5-gjj9-rg24 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-m3v5-gjj9-rg24?

GHSA-m3v5-gjj9-rg24 affects 1 product, including: composer/craftcms/cms:\u003c= 4.4.9.

GHSA-m3v5-gjj9-rg24MediumCVSS 6.1

Craft CMS vulnerable to HTML injection

Vendor

GitHub Security Advisories

Published

June 20, 2023

Last Modified

November 8, 2023

🔗 CVE IDs covered (1)

CVE-2023-33495 →

📋 Description

Craft CMS through 4.4.9 is vulnerable to HTML Injection.

🎯 Affected products1

composer/craftcms/cms:<= 4.4.9

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-33495
https://medium.com/@mondalsomnath9135/html-injection-in-craft-cms-application-e2b28f746212
https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/03-Testing_for_HTML_Injection
https://github.com/advisories/GHSA-m3v5-gjj9-rg24