Cross-site Scripting in SilverStripe Framework

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-36150 · ADVISORY
• FriendsOfPHP/security-advisories · WEB
• silverstripe/silverstripe-framework · PACKAGE
• silverstripe/silverstripe-framework release · WEB
• silverstripe.org/download/security-releases/CVE-2021-36150 · WEB

silverstripe/admin のその他の脆弱性

• GHSA-779c-7w4p-2c4g低 3.8Silverstripe admin XSS Vulnerability via WYSIWYG editor
• CVE-2023-49783中 4.3Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and …
• GHSA-jxcx-3h54-qqxx中SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
• GHSA-4q66-g4mm-8rg5中 5.4Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
• GHSA-wqm8-jx8r-8rcq中 5.4Cross-site scripting vulnerabilities in old version of bundled TinyMCE