| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | < 5.3.8 | 5.3.8 |
If a website has been set to the "dev" environment mode, a URL can be provided which includes an XSS payload which will be executed in the resulting error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free