Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/admin@1.12.5
purl pkg:composer/silverstripe/admin@1.12.5
Next non-vulnerable version 1.13.19
Latest non-vulnerable version 2.1.8
Risk score 2.5
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-j3m6-gvm8-mhvw
Aliases:
CVE-2023-49783
No permission checks for editing/deleting records with CSV import form ### Impact Users who don't have edit or delete permissions …
1.13.19
Not vulnerable
GHSA-wqm8-jx8r-8rcq
Aliases:
GMS-2023-1193
Cross-site scripting vulnerabilities in old version of bundled TinyMCE An old version of TinyMCE include an XSS vulnerability, which was …
1.12.7
Vulnerable
GHSA-4q66-g4mm-8rg5
Aliases:
GMS-2023-1800
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been …
1.13.6
Vulnerable
GHSA-jxcx-3h54-qqxx
Aliases:
GMS-2023-1964
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been patched …
1.13.6
Vulnerable
This package is not known to fix any advisories.