Kirby XSS Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-16807 · ADVISORY
• getkirby.com/changelog/kirby-2-5-7 · WEB
• packetstormsecurity.com/files/144965/KirbyCMS-Cross-Site-Scripting.html · WEB
• exploit-db.com/exploits/43140 · WEB
• exploit-db.com/exploits/43140 · Exploit

getkirby/cms のその他の脆弱性

• CVE-2026-75594高 8.2Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms…
• CVE-2026-75592中 6.9Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incom…
• CVE-2026-71415高 7.1Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did n…
• CVE-2026-69127中 6.9Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsani…
• CVE-2026-45368高 8.4Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underlying URL methods for the KirbyTags and im…