Lucene search
Veracode Vulnerability DatabaseVERACODE:38230HistoryNov 24, 2022 - 9:35 a.m.
Cross-site Scripting (XSS)
2022-11-2409:35:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
silverstripe/cms
sitetree.php
validation
remote attacker
EPSS
0.001
Percentile
31.7%
silverstripe/cms is vulnerable to cross-site scripting. The vulnerability exists due to lack of validation in the custom meta tag tool in SiteTree.php which allows a remote attacker to inject and execute malicious JavaScript into the system.
References
forum.silverstripe.org/c/releases
github.com/advisories/GHSA-pp74-g2q5-j4jf
github.com/silverstripe/silverstripe-cms/commit/8526067c738cb44179b102c6ac20a8b666c2ca56
www.silverstripe.org/blog/tag/release
www.silverstripe.org/download/security-releases/
www.silverstripe.org/download/security-releases/CVE-2022-37421
Related
osv
osv
BIT-silverstripe-2022-37421
2024-03-06 11:04:49
Silverstipe CMS Stored XSS in custom meta tags
2022-11-21 23:59:26
CVE-2022-37421
2022-11-23 03:15:10
friendsofphp
friendsofphp
CVE-2022-37421 - Stored XSS in custom meta tags
2021-11-21 00:00:00
cvelist
cvelist
CVE-2022-37421
2022-11-23 00:00:00
github
github
Silverstipe CMS Stored XSS in custom meta tags
2022-11-21 23:59:26
prion
prion
Cross site scripting
2022-11-23 03:15:00
cve
cve
CVE-2022-37421
2022-11-23 03:15:10
nvd
nvd
CVE-2022-37421
2022-11-23 03:15:10