GHSA-74J9-XHQR-6QV3

Reflected Cross Site Scripting (XSS) in error message

Title source: GitHub Advisory
STIX 2.1 vulnerability

Description

If a website has been set to the "dev" environment mode, a URL can be provided which includes an XSS payload which will be executed in the resulting error message.

Description source: GitHub Advisory

Affected products and versions

1
ProductSourceVersion range

silverstripe/framework

Browse Packagist / silverstripe/framework
GitHub AdvisoryBefore 5.3.8 · Fixed in 5.3.8affected

References

3