Description
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.
Remediation
References
https://docs.craftercms.org/en/3.0/security/advisory.html
Related Vulnerabilities
CVE-2018-6874 Vulnerability in npm package auth0-lock
CVE-2015-9235 Vulnerability in npm package jsonwebtoken
CVE-2013-1966 Vulnerability in maven package com.opensymphony:xwork-core
CVE-2013-2165 Vulnerability in maven package org.richfaces.framework:richfaces-impl
CVE-2021-21610 Vulnerability in maven package org.jenkins-ci.main:jenkins-core