Stored XSS via HTML fields in SilverStripe Framework

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-25238 · ADVISORY
• docs.silverstripe.org/en/4/changelogs/4.10.1 · WEB
• forum.silverstripe.org/c/releases · WEB
• FriendsOfPHP/security-advisories · WEB
• silverstripe.org/blog/tag/release · WEB
• silverstripe.org/download/security-releases · WEB
• silverstripe.org/download/security-releases/cve-2022-25238 · WEB
• docs.silverstripe.org/en/4/changelogs/4.10.1 · Broken Link
• silverstripe.org/download/security-releases · Not Applicable

Autres vulnérabilités de silverstripe/framework

• CVE-2026-54720MOYENNE 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functio…
• GHSA-256q-hx8w-xcqxMOYENNE 5.3Silverstripe Framework user enumeration via timing attack on login and password reset forms
• CVE-2025-30148MOYENNE 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the C…
• GHSA-74j9-xhqr-6qv3FAIBLEReflected Cross Site Scripting (XSS) in error message
• CVE-2024-53277MOYENNE 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is a…