3.5.5

DATE	CVE	VULNERABILITY TITLE	RISK
2017-09-15	CVE-2017-14498	Cross-site Scripting vulnerability in Silverstripe SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017. network silverstripe CWE-79	4.3