Silverstripe Versioned-Admin vulnerabilities

1 known vulnerability affecting silverstripe/versioned-admin.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-38145MEDIUM≥ 1.0.0, < 1.11.12022-11-22

CVE-2022-38145 [MEDIUM] CWE-79 Stored XSS in Compare Mode Stored XSS in Compare Mode A malicious content author could add a Javascript payload to a page's meta description and get it executed in the versioned history compare view. This vulnerability requires access to the CMS to be deployed. The attacker must then convince a privileged user to access the version history for that page.