| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/cms | ≤ 4.5.0 | |
| silverstripe/framework | ≥ 3.0.0, < 3.7.5 | 3.7.5 |
| silverstripe | ≥ 3.0.0, < 3.7.5 | 3.7.5 |
In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free