CVE-2022-37248

Name of the Vulnerable Software and Affected Versions Craft CMS version 4.2.0.1

Description The issue is related to Cross Site Scripting (XSS) via the file src/helpers/Cp.php. This allows for potential malicious script execution.

Recommendations For Craft CMS version 4.2.0.1, consider restricting access to the src/helpers/Cp.php file until a patch is available. As a temporary workaround, avoid using any functionality that relies on this file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.