Description
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | silverstripe/admin | >= 1.0.0, < 1.11.3 | 1.11.3 | GHSA-44xv-v98g-v79f |
Medium · 5.4
CVE-2022-38146
EUVD-2022-7221GHSA-44xv-v98g-v79f
URL XSS vulnerability due to outdated jquery in CMS
Published Nov 21, 2022 · Updated Apr 30, 2025 · Assigned by mitre