Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/admin@1.13.6
purl pkg:composer/silverstripe/admin@1.13.6
Next non-vulnerable version 1.13.19
Latest non-vulnerable version 2.1.8
Risk score 1.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-j3m6-gvm8-mhvw
Aliases:
CVE-2023-49783
No permission checks for editing/deleting records with CSV import form ### Impact Users who don't have edit or delete permissions …
1.13.19
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-4q66-g4mm-8rg5
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been … GMS-2023-1800
GHSA-jxcx-3h54-qqxx
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE TinyMCE 4.x is vulnerable to several XSS vectors, which had been patched … GMS-2023-1964