Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-33195

Fixed upstream EPSS <1%CVSS 5.0

Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.

Published 2023-05-27 · CVE record · OSV

Products: craftcms cms

Fixed upstream

EcosystemPackageFixed in
Packagistcraftcms/cms4.4.6