CVE-2022-25238

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS…

published June 28, 2022

CVSS
—
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.3th percentile
Published
2022-06-28T21:39Z
EPSS history
Timeline
  • 28 JUN 21:39Z
    Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS…
    cvelistv5