Executive brief
Silverstripe XSS in shortcodes
Affected products
- Packagist silverstripe/framework
- Packagist silverstripe/assets
Junglewise Threat Intelligence
CVE-2022-38724: Silverstripe XSS in shortcodes
CVE-2022-38724 · Severity: low · CVSS 3.1 · Published 2022-11-21
Technologies: silverstripe/framework (Packagist), silverstripe/assets (Packagist). Vendors: Packagist.
Related threats
- Silverstripe Framework XSS in Insert media from web functionality
- Silverstripe Framework user enumeration via timing attack on login and password reset forms
- Silverstripe Framework has a XSS vulnerability in HTML editor
- Reflected Cross Site Scripting (XSS) in error message
- Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message