Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-6676 Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.
Github GHSA Github GHSA GHSA-3cvm-7wrh-qrf9 Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00143}

epss

{'score': 0.00144}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T10:29:20.962Z

Reserved: 2022-08-01T00:00:00

Link: CVE-2022-37247

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-16T22:15:12.017

Modified: 2024-11-21T07:14:39.523

Link: CVE-2022-37247

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.