Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47163

HistoryMay 24, 2024 - 7:45 a.m.

Cross Site Scripting (XSS)

2024-05-2407:45:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5

cross site scripting

silverstripe/cms

virtualpage

html input

javascript

browser

vulnerability

AI Score

6.8

Confidence

High

silverstripe/cms is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to improper escaping of HTML input in the textfields of pages referred to by VirtualPage, which allows an attacker inject and execute arbitrary JavaScript in the browser.

AI Score

6.8

Confidence

High