CVE-2022-38146
published 2022-11-21CVE-2022-38146: Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
PriorityP424medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.53%
40.7th percentile
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| silverstripe | admin | >= 1.0.0 < 1.11.3 | 1.11.3 |
| silverstripe | framework | <= 4.11.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
URL XSS vulnerability due to outdated jquery in CMS
osv·2022-11-21
CVE-2022-38146 [MEDIUM] URL XSS vulnerability due to outdated jquery in CMS
URL XSS vulnerability due to outdated jquery in CMS
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
GHSA
URL XSS vulnerability due to outdated jquery in CMS
ghsa·2022-11-21
CVE-2022-38146 [MEDIUM] CWE-79 URL XSS vulnerability due to outdated jquery in CMS
URL XSS vulnerability due to outdated jquery in CMS
Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://forum.silverstripe.org/c/releaseshttps://www.silverstripe.org/blog/tag/releasehttps://www.silverstripe.org/download/security-releases/https://www.silverstripe.org/download/security-releases/CVE-2022-38146https://forum.silverstripe.org/c/releaseshttps://www.silverstripe.org/blog/tag/releasehttps://www.silverstripe.org/download/security-releases/https://www.silverstripe.org/download/security-releases/CVE-2022-38146
2022-11-21
Published