craft CMS 5.9.x < 5.9.11 Stored XSS (GHSA-3x4w-mxpf-fhqq)

版本 1.2

Mar 26, 2026, 9:39 AM

CVSS metrics ("Cvssv4 threat score" set to 5.3)
CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U")
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
Exploit attributes ("Exploit available" set to "False")
Exploit attributes ("Exploitability ease" set to "No known exploits are available")