| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.4.0-rc1, < 3.4.6≥ 3.5.0-rc1, < 3.5.4 | 3.4.63.5.4 |
Authenticated user with page edit permission can craft HTML, which when rendered in a page history comparison can execute client scripts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free