CVE-2022-38724

Description

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.silverstripe.org/download/security-releases/ ↗
• https://www.silverstripe.org/blog/tag/release ↗
• https://forum.silverstripe.org/c/releases ↗
• https://www.silverstripe.org/download/security-releases/CVE-2022-38724 ↗