Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47701
HistoryJun 24, 2024 - 5:12 a.m.

Cross Site Scripting (XSS)

2024-06-2405:12:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
cross site scripting browser vulnerability software

6.5 Medium

AI Score

Confidence

High

silverstripe/framework is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to improper validation allowing users to specify a non-URL malicious script as the redirection path, which executes within the browser when the URL is followed.

6.5 Medium

AI Score

Confidence

High