What is GHSA-h3w2-qg2r-c7mf?

GHSA-h3w2-qg2r-c7mf is a security advisory published by GitHub Security Advisories with Medium severity. Kirby CMS 2.5.12 Cross-site Scripting

Which CVE IDs does GHSA-h3w2-qg2r-c7mf cover?

GHSA-h3w2-qg2r-c7mf covers the following CVE IDs: CVE-2018-14520. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h3w2-qg2r-c7mf?

GHSA-h3w2-qg2r-c7mf has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-h3w2-qg2r-c7mf?

GHSA-h3w2-qg2r-c7mf affects 1 product, including: composer/getkirby/cms:\u003c= 2.5.12.

GHSA-h3w2-qg2r-c7mfMediumCVSS 5.4

Kirby CMS 2.5.12 Cross-site Scripting

Vendor

GitHub Security Advisories

Published

August 25, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2018-14520 →

📋 Description

An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.

🎯 Affected products1

composer/getkirby/cms:<= 2.5.12

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-14520
https://www.exploit-db.com/exploits/45068
http://zaranshaikh.blogspot.com/2018/07/cross-site-request-forgery-kirby-cms.html
https://github.com/advisories/GHSA-h3w2-qg2r-c7mf