| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 4.0.0, < 4.10.9 | 4.10.9 |
| silverstripe | < 4.10.9 | 4.10.9 |
SilverStripe Framework 4.x prior to 4.10.9 is vulnerable to cross-site scripting inside the href attribute of an HTML hyperlink, which can be added to website content via XMLHttpRequest (XHR) by an authenticated CMS user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free