VYPR
Medium severity5.4NVD Advisory· Published Sep 16, 2022· Updated Jul 9, 2026

CVE-2022-37251

CVE-2022-37251

Description

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
craftcms/cmsPackagist
>= 3.7.0-beta.1, < 3.7.55.23.7.55.2
craftcms/cmsPackagist
>= 4.0.0-RC1, < 4.2.14.2.1

Affected products

3
  • cpe:2.3:a:craftcms:craft_cms:4.2.0.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:craftcms:craft_cms:4.2.0.1:*:*:*:*:*:*:*
    • (no CPE)
  • ghsa-coords
    Range: >= 3.7.0-beta.1, < 3.7.55.2

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.