CVE-2012-4968

Multiple cross-site scripting XSS vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted string to the AbsoluteLinks, 2 BigSummary, 3 ContextSummary, 4 EscapeXML, 5 FirstParagraph, 6 FirstSentence, 7...

CVE-2012-4968

CVE-2012-4968 affects SilverStripe 2.3.x (pre-2.3.13) and 2.4.x (pre-2.4.7), enabling remote XSS via multiple template input points (e.g., AbsoluteLinks, BigSummary, ContextSummary, EscapeXML, FirstParagraph, FirstSentence, Initial, etc.). The vulnerability allows injection of arbitrary script/HT...