Medium severity6.1NVD Advisory· Published Jun 18, 2019· Updated Jun 17, 2026
CVE-2019-12823
CVE-2019-12823
Description
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
craftcms/cmsPackagist | < 3.1.31 | 3.1.31 |
Affected products
2- Craft CMS/Craft CMSdescription
Patches
Vulnerability mechanics
References
5- github.com/craftcms/cms/commit/6432eca59b93bcea2ca2616199e5d419447e613fnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-w5q4-q7wp-qww6ghsaADVISORY
- github.com/craftcms/cms/blob/master/CHANGELOG-v3.mdnvdRelease NotesThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2019-12823ghsaADVISORY
- github.com/craftcms/cms/blob/6432eca59b93bcea2ca2616199e5d419447e613f/CHANGELOG-v3.mdghsaWEB
News mentions
0No linked articles in our index yet.