| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.4.0-rc1, < 3.4.6≥ 3.5.0-rc1, < 3.5.4 | 3.4.63.5.4 |
RedirectorPage will allow users to specify a non-url malicious script as the redirection path without validation. Users which follow this url may allow this script to execute within their browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free