Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:27 p.m.11 views

silverstripe-advancedreports vulnerable to XSS

silverstripe-advancedreports aka the Advanced Reports module for SilverStripe 1.0 through 2.0 is vulnerable to Cross-Site Scripting XSS because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item ak...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/05/24 5:27 p.m.10 views

GHSA-8F2X-HV9R-MH9R silverstripe-advancedreports vulnerable to XSS

silverstripe-advancedreports aka the Advanced Reports module for SilverStripe 1.0 through 2.0 is vulnerable to Cross-Site Scripting XSS because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item ak...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References4
Veracode
Veracode
added 2020/09/04 6:51 a.m.18 views

Cross-Site Scripting (XSS)

silverstripe-australia/advancedreports is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via a malicious CSV file...

6.1CVSS3.9AI score0.0024EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2020/09/03 5:15 p.m.9 views

CVE-2020-25102

silverstripe-advancedreports aka the Advanced Reports module for SilverStripe 1.0 through 2.0 is vulnerable to Cross-Site Scripting XSS because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item ak...

6.1CVSS6AI score0.0024EPSS
Exploits1References2
Prion
Prion
added 2020/09/03 5:15 p.m.9 views

Cross site scripting

silverstripe-advancedreports aka the Advanced Reports module for SilverStripe 1.0 through 2.0 is vulnerable to Cross-Site Scripting XSS because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item ak...

4.3CVSS5.9AI score0.0024EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/09/03 4:35 p.m.14 views

CVE-2020-25102

silverstripe-advancedreports aka the Advanced Reports module for SilverStripe 1.0 through 2.0 is vulnerable to Cross-Site Scripting XSS because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item ak...

5.9AI score0.0024EPSS
Exploits1References2
Rows per page
Query Builder