PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| Piranha(NuGet) | 0 | N/A | N/A |
CVSS Metrics