CrafterCMS CrafterCMS 4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:craftercms:craftercms:4.0.0:-:*:*:*:*:*:*
part: a version: 4.0.0 update: -
| Vendor | Craftercms (83d6181b-da8f-541c-b1f9-7b016287ca19) |
|---|---|
| Product | Craftercms (eda3be33-5453-5acd-a36d-5633d6e5376d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/craftercms/craftercms |
purl2cpe | 2026-06-01 10:13:32.269460 |
pkg:maven/org.craftercms/craftercms |
purl2cpe | 2026-06-01 10:13:32.269462 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-33194 |
vulnerable | 2026-06-08 06:06:21.969470 |
CraftCMS stored XSS in Quick Post widget error message
LOW (3.7)
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was patched in version 4.4.6.
Published: 2023-05-26T20:30:23.382Z
Updated: 2025-01-14T19:25:11.922Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.