Vulnerabilities > Craftcms > Craft CMS > 4.4.3

DATE CVE VULNERABILITY TITLE RISK
2023-05-26 CVE-2023-33194 Cross-site Scripting vulnerability in multiple products
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload.
network
low complexity
craftcms craftercms CWE-79
4.8
2023-05-26 CVE-2023-33196 Cross-site Scripting vulnerability in Craftcms Craft CMS
Craft is a CMS for creating custom digital experiences.
network
low complexity
craftcms CWE-79
5.4
2023-05-26 CVE-2023-33197 Cross-site Scripting vulnerability in Craftcms Craft CMS
Craft is a CMS for creating custom digital experiences on the web.
network
low complexity
craftcms CWE-79
5.4
2023-05-26 CVE-2023-2817 Cross-site Scripting vulnerability in Craftcms Craft CMS
A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11.
network
low complexity
craftcms CWE-79
5.4
2023-05-19 CVE-2023-32679 Unspecified vulnerability in Craftcms Craft CMS
Craft CMS is an open source content management system.
network
low complexity
craftcms
7.2
2023-05-09 CVE-2023-31144 Unspecified vulnerability in Craftcms Craft CMS
Craft CMS is a content management system.
network
low complexity
craftcms
6.1