CVE-2020-19626: Craft CMS

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.

Affected products

• Craft CMS Craft CMS: version 3.1.31 only

Published 2021-03-26. Last modified 2026-06-17.