GHSA-h4fh-gpvh-753gMediumCVSS 6.1

Yab Quarx persistent cross-site scripting vulnerability

Published
May 13, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2018-7274 →

📋 Description

Yab Quarx before 2.4.5 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).

🎯 Affected products1

  • composer/yab/quarx:< 2.4.5

🔗 References (7)