Medium · 5.4 CVE-2022-28803 BIT-silverstripe-2022-28803EUVD-2022-6152GHSA-rppc-655v-7j3c

Stored XSS in link tags added via XHR in SilverStripe Framework

Published Jun 29, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).

Ecosystem	Package	Affected	Fixed	Record
Packagist	silverstripe/framework	>= 4.0.0, < 4.10.9	4.10.9	GHSA-rppc-655v-7j3c