PT-2012-1314

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.9 SilverStripe versions 2.4.x through 2.4.3 Description A cross-site scripting XSS issue exists in the httpError method, allowing remote attackers to inject arbitrary web script or HTML via missing URL...