Lucene search
MitreCVELIST:CVE-2020-25102HistorySep 03, 2020 - 4:35 p.m.
CVE-2020-25102
2020-09-0316:35:21
mitre
www.cve.org
0.001 Low
EPSS
Percentile
32.7%
silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.
Related
veracode
veracode
Cross-Site Scripting (XSS)
2020-09-04 06:51:36
osv
osv
silverstripe-advancedreports vulnerable to XSS
2022-05-24 17:27:21
nvd
nvd
CVE-2020-25102
2020-09-03 17:15:11
cve
cve
CVE-2020-25102
2020-09-03 17:15:11
github
github
silverstripe-advancedreports vulnerable to XSS
2022-05-24 17:27:21
prion
prion
Cross site scripting
2020-09-03 17:15:00