GHSA-h3w2-qg2r-c7mf

ghsaUSosv

Kirby CMS 2.5.12 Cross-site Scripting

view advisory published 2022-08-25Licence: CC-BY-4.0

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-14520US	medium5.4	0.71% (54th)	—	2022-08-24
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.