Vulnerabilities > CVE-2023-23927 - Unspecified vulnerability in Craftcms Craft CMS

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
craftcms

Summary

Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.

Vulnerable Configurations

Part Description Count
Application
Craftcms
1158