Description
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | silverstripe/versioned-admin | >= 1.0.0, < 1.11.1 | 1.11.1 | GHSA-66jf-xm2m-7m8r |