| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/admin | ≥ 1.0.3, < 1.0.4≥ 1.1.0, < 1.1.1 | 1.0.41.1.1 |
It is possible for a bad actor with access to the CMS to make use of onmouseover or onmouseout attributes in the WYSIWYG editor to embed malicious javascript.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free