Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47163

HistoryMay 24, 2024 - 7:45 a.m.

Cross Site Scripting (XSS)

2024-05-2407:45:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

cross site scripting

silverstripe/cms

virtualpage

html input

javascript

browser

vulnerability

6.8 Medium

AI Score

Confidence

High

silverstripe/cms is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to improper escaping of HTML input in the textfields of pages referred to by VirtualPage, which allows an attacker inject and execute arbitrary JavaScript in the browser.

6.8 Medium

AI Score

Confidence

High