Cross-Site Scripting (XSS)

silverstripe/admin is vulnerable to Cross-Site Scripting XSS . The vulnerability is due to inadequate input validation, allowing an attacker to embed malicious JavaScript through onmouseover or onmouseout attributes in the WYSIWYG editor...

PT-2024-40151

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows a bad actor with access to the CMS to embed malicious javascript using onmouseover or onmouseout attributes in the WYSIWYG editor. Recommendations: At the moment, there...