| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.1.18, < 3.1.19≥ 3.2.3, < 3.2.4≥ 3.3.1, < 3.3.2 | 3.1.193.2.43.3.2 |
Due to a lack of parameter sanitisation a carefully crafted URL could be used to inject arbitrary HTML into the CMS Edit page.
An attacker could create a URL and share it with a site administrator to perform an attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free