| Package | Affected versions | Patched versions |
|---|---|---|
| craftcms/cms | < 3.7.29 | 3.7.29 |
Under some circumstances, the Feeds widget on the dashboard could have an XSS vulnerability if a malformed feed was supplied.
This has been patched in Craft 3.7.29.
If you have any questions or comments about this advisory, email us at [email protected]
Credits: https://github.com/noobpk
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free