Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown.
CVSS Score
4.8
EPSS Score
0.002
Published
2019-05-13
panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.
CVSS Score
5.4
EPSS Score
0.002
Published
2019-05-13
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-12-28
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-12-20
panel/login in Kirby v2.5.12 allows XSS via a blog name.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-12-04
Page 3