Vulnerability CVE-2022-37247
Published: 2022-09-16   Modified: 2022-09-17

Description:
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

 References:
https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
https://labs.integrity.pt/advisories/cve-2022-37247/
Copyright 2026, cxsecurity.com

 

Back to Top