Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-38724 EUVD-2022-7301GHSA-9cx2-hj6m-fv58

Silverstripe XSS in shortcodes

Published Nov 22, 2022 · Updated Apr 29, 2025 · Assigned by mitre

Package: silverstripe/assets Package: silverstripe/framework Ecosystem: Packagist

Description

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist silverstripe/assets >= 1.0.0, < 1.11.1 1.11.1 GHSA-9cx2-hj6m-fv58
Packagist silverstripe/framework >= 4.0.0, < 4.11.13 4.11.13 GHSA-9cx2-hj6m-fv58

References