要点
- CVE-2026-33051 は craftcms/cms, craft cms (craftcms) に影響する深刻度「中」 (CVSS 5.4) の脆弱性です。
- 今後30日間に悪用される確率（EPSS）：0.25%（全脆弱性の 16.7% より高い）。
- 対処：5.9.11 以降に更新してください。
| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|
| craftcms/cms Packagist | ≥ 5.9.0-beta.1, < 5.9.11
| 5.9.11
|
| craft cms | ≥ 5.9.0, < 5.9.11
| 5.9.11
|
概要
The revision/draft context menu in the element editor renders the creator’s fullName as raw HTML due to the
use of Template::raw() combined with Craft::t() string interpolation. A low-privileged control panel user
(e.g., Author) can set their fullName to an XSS payload via the profile editor, then create an entry with two
saves.
If an administrator is logged in and executes a specifically crafted payload while an elevated session is active, the attacker’s account can be elevated to administrator.
Users should update to Craft 5.9.11 with the patch to mitigate the issue.
NVD の説明
Craft CMS is a content management system (CMS). In versions 5.9.0-beta.1 through 5.9.10, the revision/draft context menu in the element editor renders the creator’s fullName as raw HTML due to the use of Template::raw() combined with Craft::t() string interpolation. A low-privileged control panel user (e.g., Author) can set their fullName to an XSS payload via the profile editor, then create an entry with two saves. If an administrator is logged in and executes a specifically crafted payload while an elevated session is active, the attacker’s account can be elevated to administrator. This issue has been fixed in version 5.9.11.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン