silverstripe framework 跨站脚本漏洞

silverstripe framework is a CMS website framework. A security vulnerability exists in silverstripe framework version 4.11 and earlier versions. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

silverstripe framework 跨站脚本漏洞

silverstripe framework is a CMS web framework. A security vulnerability exists in silverstripe framework version 4.11.0 and earlier, which stems from allowing XSS...

silverstripe framework 跨站脚本漏洞

silverstripe framework is a CMS web framework. A cross-site scripting vulnerability exists in silverstripe framework versions 3.0.0 and later and 4.11.1 and earlier, which stems from a lack of effective filtering and escaping of user-supplied data and can be exploited by an attacker to execute...

CVE-2022-38145

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 3 via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view...

CVE-2022-37429

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 2 via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters...

CVE-2022-38147

Silverstripe silverstripe/framework through 4.11 allows XSS issue 3 of 3...

CVE-2022-37430

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link issue 2 of 2...

CVE-2022-37429

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 2 via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters...

CVE-2022-38147

Silverstripe silverstripe/framework through 4.11 allows XSS issue 3 of 3...

CVE-2022-37429: Improper Neutralization of Input During Web Page Generation

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 2 via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters...

CVE-2022-38147: Improper Neutralization of Input During Web Page Generation

Silverstripe silverstripe/framework through 4.11 allows XSS issue 3 of 3...

CVE-2022-37430: Improper Neutralization of Input During Web Page Generation

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link issue 2 of 2...

CVE-2022-37430

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link issue 2 of 2...

CVE-2022-38145

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 3 via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view...

CVE-2022-38147

Silverstripe silverstripe/framework through 4.11 allows XSS issue 3 of 3...

CVE-2022-38145

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 3 via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view...

CVE-2022-38145: Improper Neutralization of Input During Web Page Generation

Silverstripe silverstripe/framework through 4.11 allows XSS issue 1 of 3 via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view...

Design/Logic Flaw

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request...

SQL Injection

silverstripe/framework is vulnerable to SQL Injection. The vulnerability exists in the getManipulatedData function in GridFieldSortableHeader.php where an attacker with cms access could execute an arbitrary sql statements...

silverstripe framework 跨站脚本漏洞

silverstripe framework is a set of CMS website framework. A security vulnerability exists in silverstripe framework version 4.11.0 and earlier, silverstripe/assets version 1.11.0 and earlier, and silverstripe/asset-admin version 1.11.0 and earlier. An attacker could exploit this vulnerability to...