← All advisories

Medium severity6.1NVD Advisory· Published May 7, 2021· Updated Jun 17, 2026

CVE-2021-32470

CVE-2021-32470

Description

Craft CMS before 3.6.13 has an XSS vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
craftcms/cmsPackagist	< 3.6.13	3.6.13

Affected products

2

Craft/Craft CMSdescription
ghsa-coords
pkg:composer/craftcms/cms
Range: < 3.6.13

Patches

Vulnerability mechanics

References

5

github.com/craftcms/cms/commit/f9378aa154b5f9b64bed3d59cce0c4a8184bf5e6nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-h2rj-8wgg-mm43ghsaADVISORY
github.com/craftcms/cms/blob/develop/CHANGELOG.mdnvdRelease NotesThird Party Advisory
nvd.nist.gov/vuln/detail/CVE-2021-32470ghsaADVISORY
github.com/craftcms/cms/blob/3.6.13/CHANGELOG.mdghsaWEB

News mentions

0

No linked articles in our index yet.