All vulnerabilities

Servers and applications

CVE-2022-35174

Cross-site scripting (XSS) from content entered in the tags and multiselect fields

Severity
High 7.1
Published
24 Aug 2022
Last changed
24 Aug 2022
Added to UpHeron
3 Nov 2026
Fixed in
3.7.4
Also known as
GHSA-rv3r-vqjj-8c76
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
KirbyServers and applications · github:getkirby/kirby
  • From 3.7.0 before 3.7.4

References