Medium · 5.4 CVE-2022-37430 EUVD-2022-7415GHSA-qw4w-vq8v-2wcv

Stored XSS using uppercase characters in HTMLEditor

Published Nov 23, 2022 · Updated Apr 25, 2025 · Assigned by mitre

Description

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).

Ecosystem	Package	Affected	Fixed	Record
Packagist	silverstripe/framework	>= 4.0.0, < 4.11.13	4.11.13	GHSA-qw4w-vq8v-2wcv