Filtered by vendor Silverstripe
Subscriptions
Filtered by product Silverstripe
Subscriptions
Total
64 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-12205 | 1 Silverstripe | 1 Silverstripe | 2024-11-21 | 6.1 Medium |
| SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS. | ||||
| CVE-2019-12204 | 1 Silverstripe | 1 Silverstripe | 2024-11-21 | 9.8 Critical |
| In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access. | ||||
| CVE-2019-12203 | 1 Silverstripe | 1 Silverstripe | 2024-11-21 | 6.3 Medium |
| SilverStripe through 4.3.3 allows session fixation in the "change password" form. | ||||
| CVE-2017-18049 | 1 Silverstripe | 1 Silverstripe | 2024-11-21 | N/A |
| In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page. | ||||