CVE-2012-0976

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-0976

The provided documents confirm CVE-2012-0976 affects SilverStripe 2.4.6, where an XSS vulnerability exists in admin/EditForm; remote authenticated users with Content Authors privileges can inject arbitrary script/HTML via the Title parameter. The description notes these details originate from thi...

CVE-2012-0976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

PT-2012-2982

Name of the Vulnerable Software and Affected Versions SilverStripe version 2.4.6 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter in the admin/EditForm section...