| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/admin | < 1.3.5 | 1.3.5 |
| silverstripe/framework | ≥ 3.0.0, < 4.3.5≥ 4.4.0-rc1, < 4.4.4 | 4.3.54.4.4 |
| silverstripe | ≤ 4.3.3 |
SilverStripe versions 3.0.0 until 4.3.5 and 4.4.4 are vulnerable to Flash Clipboard Reflected XSS. Versions 4.3.5 and 4.4.4 of silverstripe/framework and version 1.3.5 of silverstripe/admin contain a fix for this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free