Description
Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| silverstripe | silverstripe-framework | < 6.2.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | silverstripe/framework | < 6.2.2 | 6.2.2 | GHSA-gvrw-qqp5-jgc5 |