Vulnerability Database
296,147
Total vulnerabilities in the database
CVE-2022-37429
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.
| Software | From | Fixed in |
|---|---|---|
silverstripe / framework
|
4.0.0 | 4.11.13 |
|
silverstripe / framework
|
3.0.0 | 4.11.13 |
- https://forum.silverstripe.org/c/releases
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2022-37429.yaml
- https://www.silverstripe.org/blog/tag/release
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/download/security-releases/CVE-2022-37429