CVE-2015-5063

Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...

CVE-2015-5063

CVE-2015-5063 affects SilverStripe CMS & Framework 3.1.13. The vulnerability is an XSS in install.php triggered by the admin_username or admin_password parameters, allowing remote attackers to inject arbitrary web script or HTML. Related references corroborate XSS via install.php and show exploit...