Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-26481

Fixed upstream EPSS <1%CVSS 4.7

Kirby CMS v4.1.0 was discovered to contain a reflected self-XSS vulnerability via the URL parameter.

Published 2024-02-22 · CVE record · OSV

Products: getkirby kirby

Fixed upstream

EcosystemPackageFixed in
Packagistgetkirby/cms3.6.6.5
Packagistgetkirby/cms3.7.5.4
Packagistgetkirby/cms3.8.4.3
Packagistgetkirby/cms3.9.8.1
Packagistgetkirby/cms3.10.0.1
Packagistgetkirby/cms4.1.1