Show filters
111 Total Results
Displaying 21-30 of 111
Sort by:
Attacker Value
Unknown
CVE-2022-37430
Disclosure Date: November 23, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).
0
Attacker Value
Unknown
CVE-2022-38145
Disclosure Date: November 23, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.
0
Attacker Value
Unknown
CVE-2022-37429
Disclosure Date: November 23, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.
0
Attacker Value
Unknown
CVE-2022-38724
Disclosure Date: November 23, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.
0
Attacker Value
Unknown
CVE-2022-38462
Disclosure Date: November 22, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.
0
Attacker Value
Unknown
CVE-2022-38146
Disclosure Date: November 21, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
0
Attacker Value
Unknown
CVE-2022-38148
Disclosure Date: November 21, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.11 allows SQL Injection.
0
Attacker Value
Unknown
CVE-2022-28803
Disclosure Date: June 29, 2022 (last updated February 24, 2025)
In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).
0
Attacker Value
Unknown
CVE-2022-29858
Disclosure Date: June 28, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.
0
Attacker Value
Unknown
CVE-2022-25238
Disclosure Date: June 28, 2022 (last updated February 24, 2025)
Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.
0
