CVE-2020-9311

In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for…

published July 15, 2020

CVSS
—
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Published
2020-07-15T21:00Z
EPSS history
Timeline
  • 15 JUL 21:00Z
    In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for…
    cvelistv5