Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/framework@3.5.0-alpha0
purl pkg:composer/silverstripe/framework@3.5.0-alpha0
Tags Ghost
Next non-vulnerable version 6.2.2
Latest non-vulnerable version 6.2.2
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
SS-2017-001

XSS In page name SilverStripe is vulnerable to XSS via the page name. For instance, page name `"><svg/onload=alert(/xss/)>` will trigger …
3.5.2-rc1
Vulnerable
3.4.4-rc1
Vulnerable
This package is not known to fix any advisories.