[MEDIUM] Craft CMS Feed-Me

PKSA-yq9g-7wmy-ph9w CVE-2023-36260 GHSA-6p78-f7h9-6838

Affected version: <4.6.2

Reported by:
GitHub

[MEDIUM] Craft CMS Privilege Escalation

PKSA-gcgv-38nz-y8bs CVE-2024-21622 GHSA-j5g9-j7r4-6qvx

Affected version: >=3.0.0,<=3.9.5|>=4.0.0-RC1,<=4.5.10

Reported by:
GitHub

[CRITICAL] Craft CMS Remote Code Execution vulnerability

PKSA-zdwv-2yjx-tdbf CVE-2023-41892 GHSA-4w8r-3xrw-v25g

Affected version: >=4.0.0-RC1,<=4.4.14

Reported by:
GitHub

[HIGH] Craft CMS vulnerable to Remote Code Execution via validatePath bypass

PKSA-cdfq-1syy-3hcn CVE-2023-40035 GHSA-44wr-rmwq-3phw

Affected version: >=3.0.0,<=3.8.14|>=4.0.0-RC1,<=4.4.14

Reported by:
GitHub

[MEDIUM] Craft CMS vulnerable to HTML injection

PKSA-htxf-m811-km69 CVE-2023-33495 GHSA-m3v5-gjj9-rg24

Affected version: <=4.4.9

Reported by:
GitHub

[MEDIUM] Stored cross site scripting in Craft CMS

PKSA-j8mx-rm6f-69pz CVE-2023-2817 GHSA-7x94-jx75-3gh6

Affected version: >=4.0.0-RC1,<4.4.12

Reported by:
GitHub

[MEDIUM] Craft CMS stored XSS in review volume

PKSA-d3nn-kdfd-kcm5 CVE-2023-33196 GHSA-cjmm-x9x9-m2w5

Affected version: >=4.0.0-RC1,<=4.4.6

Reported by:
GitHub