| Package | Affected versions | Patched versions |
|---|---|---|
| craftcms/cms | < 3.7.68 | 3.7.68 |
| craft cms | = 3.7.59 |
CraftCMS prior to version 3.7.68 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free