| Package | Affected versions | Patched versions |
|---|---|---|
| symbiote/silverstripe-queuedjobs | ≥ 3.0.0, < 3.0.2≥ 3.1.0, < 3.1.4≥ 4.0.0, < 4.0.7≥ 4.1.0, < 4.1.2≥ 4.2.0, < 4.2.4≥ 4.3.0, < 4.3.3≥ 4.4.0, < 4.4.3≥ 4.5.0, < 4.5.1≥ 4.6.0, < 4.6.4 | 3.0.23.1.44.0.74.1.24.2.44.3.34.4.34.5.14.6.4 |
| silverstripe queued jobs | ≥ 3.0.0, < 3.0.2≥ 3.1.0, < 3.1.4≥ 4.0.0, < 4.0.7≥ 4.1.0, < 4.1.2≥ 4.2.0, < 4.2.4≥ 4.3.0, < 4.3.3≥ 4.4.0, < 4.4.3≥ 4.5.0, < 4.5.1≥ 4.6.0, < 4.6.4 | 3.0.23.1.44.0.74.1.24.2.44.3.34.4.34.5.14.6.4 |
A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free