Search for packages
| purl | pkg:composer/silverstripe/admin@1.0.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-j66h-cc96-c32q
Aliases: CVE-2021-36150 |
Cross-site Scripting in SilverStripe Framework SilverStripe Framework through 4.8.1 allows XSS. |
Vulnerable |
|
GHSA-44xv-v98g-v79f
Aliases: CVE-2022-38146 |
URL XSS vulnerability due to outdated jquery in CMS Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3). |
Vulnerable |
|
GHSA-rfvw-5848-gxc5
Aliases: CVE-2019-12205 |
Silverstripe Flash Clipboard Reflected XSS SilverStripe versions 3.0.0 until 4.3.5 and 4.4.4 are vulnerable to Flash Clipboard Reflected XSS. Versions … |
Vulnerable |
|
GHSA-j3m6-gvm8-mhvw
Aliases: CVE-2023-49783 |
No permission checks for editing/deleting records with CSV import form ### Impact Users who don't have edit or delete permissions … |
Not vulnerable |
|
GHSA-wqm8-jx8r-8rcq
Aliases: GMS-2023-1193 |
Cross-site scripting vulnerabilities in old version of bundled TinyMCE An old version of TinyMCE include an XSS vulnerability, which was … |
Vulnerable |
|
GHSA-4q66-g4mm-8rg5
Aliases: GMS-2023-1800 |
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been … |
Vulnerable |
|
GHSA-jxcx-3h54-qqxx
Aliases: GMS-2023-1964 |
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been patched … |
Vulnerable |