Executive brief
Formwork Cross-site Scripting (XSS) from Page title field
Affected products
- Packagist getformwork/formwork
Junglewise Threat Intelligence
CVE-2023-24230: Formwork Cross-site Scripting (XSS) from Page title field
CVE-2023-24230 · Severity: low · CVSS 3.1 · Published 2023-02-10
Technologies: getformwork/formwork (Packagist). Vendors: Packagist.
Related threats
- Formwork Improperly Managed Privileges in User creation
- Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags
- Formwork improperly validates input of User role preventing site and panel availability
- Formwork has a cross-site scripting (XSS) vulnerability in Site title
- formwork Cross-site scripting vulnerability in Markdown fields