Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2021/03/24 5:42 p.m.•125 views

GHSA-XGPF-P52J-PF7M XSS in CreateQueuedJobTask

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

6.1CVSS6AI score0.00751EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/03/24 5:42 p.m.•71 views

XSS in CreateQueuedJobTask

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

6.1CVSS4.7AI score0.00751EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2021/03/17 2:15 a.m.•23 views

Cross-site Scripting (XSS)

silverstripe/queuedjobs is vulnerable to cross-site scripting. An attacker is able to inject and execute Javascript in a user's browser through the CreateQueuedJobTask dev task via a malicious URL...

6.1CVSS3.2AI score0.00751EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/03/16 3:09 p.m.•4 views

CVE-2021-27938

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

6.1CVSS0.00751EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/03/16 12:00 a.m.•20 views

Silverstripe CMS 跨站脚本漏洞

Silverstripe CMS is an application from Silverstripe New Zealand. Empower powerful digital teams by creating a platform for digital change. A security vulnerability exists in Silverstripe CMS versions 3 and 4, which stems from a vulnerability in the symbiote/silverstripe-queuedjobs module that...

6.1CVSS5.8AI score0.00751EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/16 12:00 a.m.•4 views

CVE-2021-27938: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL...

6.1CVSS5.8AI score0.00751EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/16 12:00 a.m.•4 views

PT-2021-17679

Name of the Vulnerable Software and Affected Versions: symbiote/silverstripe-queuedjobs module versions 3 through 4 Description: A Cross Site Scripting issue allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL. This is achieved by...

6.1CVSS0.00751EPSS
SaveExploits0References8
Rows per page
Query Builder