CVE-2024-26481

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-26481
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26481.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26481
Aliases
Related
Published
2024-02-22T05:15:09.867Z
Modified
2026-02-13T02:41:36.456474Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Kirby CMS v4.1.0 was discovered to contain a reflected self-XSS vulnerability via the URL parameter.

References

Affected packages

Git / github.com/getkirby/kirby

Affected ranges

Type
GIT
Repo
https://github.com/getkirby/kirby
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
22c2137a4b90a5b8bc54aec67f0123869d007b1a
Introduced
066b0506a81fdd331edc54add601d907a61ebbb4
Fixed
d1386803fd683d188e9d68158509f99b39d6a381
Introduced
3e5899b628a2b59c1833a8d79eda292a7fe06843
Fixed
077d2d6f1fa3628632097e36bc970403854b3564
Introduced
d210f26602cf72c926d8ccf8befd61d7831888da
Fixed
ae19b026daa771992f18404c585ed68c25499de0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26481.json"