| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 4.0.0, < 4.3.5≥ 4.4.0, < 4.4.4 | 4.3.54.4.4 |
| silverstripe | ≤ 4.0.0 |
In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free