Kirby CMS 2.5.12 Cross-site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-14520 · ADVISORY
• getkirby/kirby · PACKAGE
• exploit-db.com/exploits/45068 · WEB
• zaranshaikh.blogspot.com/2018/07/cross-site-request-forgery-kirby-cms.html · WEB

getkirby/cms 的其他漏洞

• CVE-2026-75594高危 8.2Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms…
• CVE-2026-75592中危 6.9Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incom…
• CVE-2026-71415高危 7.1Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did n…
• CVE-2026-69127中危 6.9Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsani…
• CVE-2026-45368高危 8.4Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, the underlying URL methods for the KirbyTags and im…