craftcms/cms

Craft CMS SSRF and Arbitrary JS Injection via /actions/app/resource-js

Craft CMS is vulnerable to SSRF and Arbitrary JavaScript Injection via the /actions/app/resource-js endpoint due to default permis