← All advisories

Medium severity5.4NVD Advisory· Published Aug 24, 2022· Updated Jun 17, 2026

CVE-2018-14520

CVE-2018-14520

Description

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
getkirby/cmsPackagist	<= 2.5.12	—

Affected products

2

Getkirby/Kirby CMScpe-rescue
ghsa-coords
pkg:composer/getkirby/cms
Range: <= 2.5.12

Patches

Vulnerability mechanics

References

4

zaranshaikh.blogspot.com/2018/07/cross-site-request-forgery-kirby-cms.htmlnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-h3w2-qg2r-c7mfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-14520ghsaADVISORY
www.exploit-db.com/exploits/45068nvdThird Party AdvisoryVDB EntryWEB

News mentions

0

No linked articles in our index yet.