CVE-2011-4958

🗓️ 08 Apr 2014 14:22:07Reported by [email protected]Type

Cross-site scripting vulnerability in SSViewer.php allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholder

Reporter	Title	Published	Views	Family All 4
Circl	CVE-2011-4958	11 Oct 201100:00	–	circl
CVE	CVE-2011-4958	8 Apr 201414:00	–	cve
Cvelist	CVE-2011-4958	8 Apr 201414:00	–	cvelist
Prion	Cross site scripting	8 Apr 201414:22	–	prion

NVD

Node

silverstripe silverstripeRange≤2.3.12

silverstripe silverstripeMatch2.3.0

silverstripe silverstripeMatch2.3.0rc1

silverstripe silverstripeMatch2.3.0rc2

silverstripe silverstripeMatch2.3.0rc3

silverstripe silverstripeMatch2.3.1

silverstripe silverstripeMatch2.3.1rc1

silverstripe silverstripeMatch2.3.1rc2

silverstripe silverstripeMatch2.3.2

silverstripe silverstripeMatch2.3.3

silverstripe silverstripeMatch2.3.4

silverstripe silverstripeMatch2.3.5

silverstripe silverstripeMatch2.3.6

silverstripe silverstripeMatch2.3.7

silverstripe silverstripeMatch2.3.8

silverstripe silverstripeMatch2.3.9

silverstripe silverstripeMatch2.3.10

silverstripe silverstripeMatch2.3.11

silverstripe silverstripeMatch2.4.0

silverstripe silverstripeMatch2.4.1

silverstripe silverstripeMatch2.4.2

silverstripe silverstripeMatch2.4.3

silverstripe silverstripeMatch2.4.4

silverstripe silverstripeMatch2.4.5

Source	Link
doc	www.doc.silverstripe.org/sapphire/en/trunk/changelogs/2.3.12
osvdb	www.osvdb.org/76258
securityfocus	www.securityfocus.com/archive/1/520050/100/0/threaded
rul3z	www.rul3z.de/advisories/SSCHADV2011-024.txt
github	www.github.com/silverstripe/sapphire/commit/16c3235
doc	www.doc.silverstripe.org/sapphire/en/trunk/changelogs/2.4.6
secunia	www.secunia.com/advisories/46390
github	www.github.com/silverstripe/sapphire/commit/bdd6391
github	www.github.com/silverstripe/sapphire/commit/52a895f

06 May 2026 22:30Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

EPSS0.07722

CWE-79