Description
Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | silverstripe/framework | >= 4.0.0, < 4.11.13 | 4.11.13 | GHSA-vvxf-r4vm-2vm6 |