Search for packages
| purl | pkg:composer/silverstripe/framework@3.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rfvw-5848-gxc5
Aliases: CVE-2019-12205 |
Silverstripe Flash Clipboard Reflected XSS SilverStripe versions 3.0.0 until 4.3.5 and 4.4.4 are vulnerable to Flash Clipboard Reflected XSS. Versions … |
Vulnerable |
|
GHSA-2pw2-qpcp-m47x
Aliases: CVE-2020-9311 |
Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can … |
Vulnerable |
|
GHSA-q9ff-3q93-fm8m
Aliases: CVE-2019-19326 |
SilverStripe Web Cache Poisoning through HTTPRequestBuilder SilverStripe through 4.4.4 allows Web Cache Poisoning through HTTPRequestBuilder. |
Vulnerable |
|
GHSA-7mv4-4xpg-xq44
Aliases: CVE-2020-26138 |
FormField with square brackets in field name skips validation FileField with array notation skips validation The FileField class is commonly … |
Vulnerable |
|
GHSA-qp29-wcc2-vmpc
|
Silverstripe HtmlEditor embed url sanitisation "Add from URL" doesn't clearly sanitise URL server side HtmlEditorField_Toolbar has an action HtmlEditorField_Toolbar#viewfile, which … |
Vulnerable |
|
GHSA-j982-5jv7-v43r
|
Silverstripe Form field validation message XSS vulnerability A high level XSS risk has been identified in the encoding of validation … |
Vulnerable |
|
GHSA-36xx-7vf6-7mv3
Aliases: CVE-2023-32302 |
Silverstripe Framework: Members with no password can be created and bypass custom login forms When a new `Member` record was … |
Vulnerable |
|
SS-2015-009-1
|
Cross-site Scripting XSS In rewritten hash links. |
Vulnerable Vulnerable |
|
SS-2015-014-1
|
Code Injection Vulnerability on `isDev`, `isTest` and `flush` `$_GET` validation. |
Vulnerable Vulnerable |
|
SS-2015-011-1
|
Potential SQL Injection Vulnerability in silverstripe. |
Vulnerable Vulnerable |
|
CVE-2022-37421
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Silverstripe silverstripe/cms through 4.11.0 allows XSS. |
Vulnerable |
|
SS-2015-027-1
|
Improper Input Validation `HtmlEditor` improper URL sanitisation. |
Vulnerable |
|
SS-2015-012-1
|
URL Redirection to Untrusted Site (Open Redirect) External redirection risk in `Security?ReturnURL`. |
Vulnerable Vulnerable |
|
SS-2014-015-1
|
IE requests issue IE requests not properly behaving with `rewritehashlinks`. |
Vulnerable Vulnerable |
|
CVE-2021-28661
|
Incorrect Authorization Default SilverStripe GraphQL Server (aka silverstripe/graphql) permission checker is not inherited by query subclass. |
Vulnerable |
|
SS-2015-026-1
|
Cross-site Scripting Form field validation message XSS vulnerability. |
Vulnerable |
|
GHSA-wvfw-w3x6-g526
Aliases: CVE-2019-5715 |
Silverstripe Framework SQLi Vulnerability All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 … |
Vulnerable Vulnerable |
|
GHSA-g4hp-pfvf-vm5w
|
SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation When a secure token parameter is provided to a SilverStripe site … |
Vulnerable |