Vulnerabilities > Silverstripe

DATE CVE VULNERABILITY TITLE RISK
2022-11-23 CVE-2022-37421 Cross-site Scripting vulnerability in Silverstripe
Silverstripe silverstripe/cms through 4.11.0 allows XSS.
network
low complexity
silverstripe CWE-79
5.4
2022-11-23 CVE-2022-38147 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).
network
low complexity
silverstripe CWE-79
5.4
2022-11-23 CVE-2022-37429 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.
network
low complexity
silverstripe CWE-79
5.4
2022-11-23 CVE-2022-37430 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).
network
low complexity
silverstripe CWE-79
5.4
2022-11-23 CVE-2022-38145 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.
network
low complexity
silverstripe CWE-79
5.4
2022-11-23 CVE-2022-38724 Cross-site Scripting vulnerability in Silverstripe Asset Admin and Assets
Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.
network
low complexity
silverstripe CWE-79
5.4
2022-11-22 CVE-2022-38462 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.
network
low complexity
silverstripe CWE-79
6.1
2022-11-21 CVE-2022-38146 Cross-site Scripting vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
network
low complexity
silverstripe CWE-79
5.4
2022-11-21 CVE-2022-38148 SQL Injection vulnerability in Silverstripe Framework
Silverstripe silverstripe/framework through 4.11 allows SQL Injection.
network
low complexity
silverstripe CWE-89
8.8
2022-06-29 CVE-2022-28803 Cross-site Scripting vulnerability in Silverstripe
In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).
3.5