Description
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1829)
Drupal Core 7.x SQL Injection (7.0 - 7.31)
WordPress Plugin Quick Chat Cross-Site Scripting (4.14)
WordPress Plugin WP Google Maps Multiple Cross-Site Scripting Vulnerabilities (6.0.26)
phpMyAdmin Improper Authentication Vulnerability (CVE-2022-23807)