CVE-2023-33195
Fixed upstream EPSS <1%CVSS 5.0
Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.
Products: craftcms cms
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | craftcms/cms | 4.4.6 |