CVE-2022-28803

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

CVE-2022-28803

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

Cross site scripting

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

CVE-2022-28803

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

CVE-2022-28803

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

PT-2022-19248 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: SilverStripe Framework versions prior to 4.10.9 SilverStripe Framework through 2022-04-07 Description: The issue allows for Stored XSS to occur in javascript link tags added via XMLHttpRequest XHR. This can happen when an authenticated CMS us...

CVE-2022-28803: Improper Neutralization of Input During Web Page Generation

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest XHR...

CVE-2022-25238

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitiseserverside contig is not set to true in project code...

CVE-2022-24444

Silverstripe silverstripe/framework through 4.10 allows Session Fixation...

Session fixation

Silverstripe silverstripe/framework through 4.10 allows Session Fixation...

CVE-2022-25238

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitiseserverside contig is not set to true in project code...

CVE-2022-24444

Silverstripe silverstripe/framework through 4.10 allows Session Fixation...

CVE-2022-24444

Silverstripe silverstripe/framework through 4.10 allows Session Fixation...

CVE-2021-41559

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array that enables a remote attack via a crafted XML document...

CVE-2021-41559

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array that enables a remote attack via a crafted XML document...

CVE-2021-41559: Improper Restriction of Recursive Entity References in DTDs

Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array that enables a remote attack via a crafted XML document...

CVE-2022-24444: Session Fixation

Silverstripe silverstripe/framework through 4.10 allows Session Fixation...

silverstripe framework 跨站脚本漏洞

silverstripe framework is a set of CMS website frameworks. A security vulnerability exists in silverstripe framework version 2022-04-07 and earlier versions. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via the XMLHttpRequest XHR javascript link tag...

silverstripe framework 授权问题漏洞

silverstripe framework is a CMS web framework. A security vulnerability exists in silverstripe framework version 1.10 and earlier versions. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

PT-2022-17171

Name of the Vulnerable Software and Affected Versions Silverstripe silverstripe/framework versions 4.10.0 through 4.10.8 Silverstripe silverstripe/framework versions prior to 4.10.9 is not mentioned, however since 4.10.8 is the last version mentioned as vulnerable, we can assume that versions pri...