CVE-2022-37247 Information

Description

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

Reference

https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627 https://labs.integrity.pt/advisories/cve-2022-37247/