Description
CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Login Lite For WooCommerce Security Bypass (1.6.0)
WordPress Plugin Seriously Simple Podcasting Cross-Site Request Forgery (2.16.0)
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27623)
Drupal Core 8.8.x Multiple Cross-Site Scripting Vulnerabilities (8.8.0 - 8.8.9)