VYPR
← All advisories
High severityNVD Advisory· Published Feb 22, 2024· Updated Aug 29, 2024

CVE-2024-26482

CVE-2024-26482

Description

An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is backend sanitization such that the reporter's mentioned "injecting malicious scripts" would not occur.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
getkirby/cmsPackagist
<= 4.1.0—

Affected products

28

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.