silverstripe

Records98All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

silverstripe records in CISA KEV

No silverstripe vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Asset Admin · all components

TI-2022-18248 CVE-2022-38724 · GHSA-9cx2-hj6m-fv58

LOW 26

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00709 Published 2022-11-22 Fixed in 1.11.1, 4.11.13 CWE-79