| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | < 3.1.14 | 3.1.14 |
A XSS risk exists in the returnURL parameter passed to dev/build. An unvalidated url could cause the user to redirect to an unverified third party url outside of the site.
This issue is resolved in framework 3.1.14 stable release.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free