Description
A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.silverpeas.core:silverpeas-core-war | <= 6.4-feature13197 | — | GHSA-vmj7-7xmm-4349 |
| Maven | org.silverpeas.core:silverpeas-core-web | <= 6.4-feature13197 | — | GHSA-vmj7-7xmm-4349 |