URL XSS vulnerability due to outdated jquery in CMS

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-38146 · ADVISORY
• forum.silverstripe.org/c/releases · WEB
• FriendsOfPHP/security-advisories · WEB
• silverstripe.org/blog/tag/release · WEB
• silverstripe.org/download/security-releases · WEB
• silverstripe.org/download/security-releases/CVE-2022-38146 · WEB
• silverstripe.org/download/security-releases · Vendor Advisory

Lỗ hổng khác của silverstripe/admin

• GHSA-779c-7w4p-2c4gTHẤP 3.8Silverstripe admin XSS Vulnerability via WYSIWYG editor
• CVE-2023-49783TRUNG BÌNH 4.3Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and …
• GHSA-jxcx-3h54-qqxxTRUNG BÌNHSilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
• GHSA-4q66-g4mm-8rg5TRUNG BÌNH 5.4Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
• GHSA-wqm8-jx8r-8rcqTRUNG BÌNH 5.4Cross-site scripting vulnerabilities in old version of bundled TinyMCE