CVE-2024-27087— Kirby cross-site scripting (XSS) in the link field "Custom" type
Quick assessment
Affected
getkirby kirby
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kirby是一套基于文件的内容管理系统（CMS）。 Kirby 4.1.1之前版本存在安全漏洞，该漏洞源于引入的新链接字段允许多种不同的链接类型，攻击者利用该漏洞可能会执行任意JavaScript代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-27087
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kirby cross-site scripting (XSS) in the link field "Custom" type
Source: CVE Program / CVE List V5
Vulnerability Description
Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the entered link to the relevant URL format. It also includes a "Custom" link type for advanced use cases that don't fit any of the pre-defined link formats. As the "Custom" link type is meant to be flexible, it also allows the javascript: URL scheme. In some use cases this can be intended, but it can also be misused by attackers to execute arbitrary JavaScript code when a user or visitor clicks on a link that is generated from the contents of the link field. This vulnerability is patched in 4.1.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Kirby 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kirby是一套基于文件的内容管理系统（CMS）。 Kirby 4.1.1之前版本存在安全漏洞，该漏洞源于引入的新链接字段允许多种不同的链接类型，攻击者利用该漏洞可能会执行任意JavaScript代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-27087
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-27087
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-27087 (1)
Vendor Advisories for CVE-2024-27087 (1)
-
https://github.com/getkirby/kirby/security/advisories/GHSA-63h4-w25c-3qv4 x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: kirby
-
CVE-2026-75594
Kirby: Access to image files and limited access to JSON file -
CVE-2026-75592
Kirby: Access to image files outside of the site root via pa -
CVE-2026-71415
Kirby: File upload permissions are not checked during proces -
CVE-2026-69127
Kirby: System path exposure from error messages in the REST -
CVE-2026-45368
Kirby: Cross-site scripting (XSS) from links in KirbyTags an
Same vendor: getkirby
-
CVE-2026-75594
Kirby: Access to image files and limited access to JSON file -
CVE-2026-75592
Kirby: Access to image files outside of the site root via pa -
CVE-2026-71415
Kirby: File upload permissions are not checked during proces -
CVE-2026-69127
Kirby: System path exposure from error messages in the REST -
CVE-2026-45368
Kirby: Cross-site scripting (XSS) from links in KirbyTags an
Same weakness: CWE-79
-
CVE-2026-92767
Twenty20 Image Before-After <= 2.0.5 - Authenticated (Contri -
CVE-2026-104313
WPC Estimated Delivery Date for WooCommerce <= 4.0.1 - Refle -
CVE-2026-93889
Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site S -
CVE-2026-93896
WPFront Notification Bar <= 3.5.1 - Reflected Cross-Site Scr -
CVE-2026-92974
Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scri
V. Comments for CVE-2024-27087
No comments yet