Threats tagged 'ghsa-g59r-24g3-h7cm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.0	CVE-2025-64112statamic/cms · Cms: Statamic Vulnerable to Superadmin Account Takeover via Stored Cross-Site Scripting and Lack of Proper High8.02025-10-30GCVE DatabaseCVE-2025-64112 Statamic CMS versions up to 5.22.0 contain stored cross-site scripting (XSS) vulnerabilities in Collections and Taxonomies that allow authenticated users with content creation permissions to inject malicious JavaScript. When a super admin views the compromised content, the attacker can exploit this to take over the superadmin account by changing the password or email address. The issue is fixed in version 5.22.1. Report on CVE-2025-64112 Vulnerability CWE-79 #ghsa-g59r-24g3-h7cm #packagist	GCVE Database	2025-10-30

Page 1 of 1