Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/04/03 9:6 p.m.27 views

Silverstripe Form Capture vulnerable to stored cross-site-scripting

Impact Improper escaping when presenting stored form submissions allowed for an attacker to perform a Cross-Site Scripting attack Patches The vulnerability was initially patched in version 1.0.2, and version 1.1.0 includes this patch. The bug was then accidentally re-introduced during a merge...

6.1CVSS5.1AI score0.00393EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder