craftcms/cms · Security
XSS Injection Vulnerability
- GHSA ID
- GHSA-wf98-vxv9-jqfv
- Severity
- low
- Published
- Updated
Description
Impact
Under some circumstances, the Feeds widget on the dashboard could have an XSS vulnerability if a malformed feed was supplied.
Patches
This has been patched in Craft 3.7.29.
References
For more information
If you have any questions or comments about this advisory, email us at [email protected]
Credits: https://github.com/noobpk