Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Tommcclymont

#45336of 56,337
6.1Total CVSS
Vulnerabilities · 1
PT-2023-22008
6.1
2023-04-03
Silverstripe · Silverstripe Form Capture · CVE-2023-28851
**Name of the Vulnerable Software and Affected Versions** Silverstripe Form Capture versions 0.2.0 through 1.0.1 Silverstripe Form Capture versions 1.1.1 through 2.2.4 Silverstripe Form Capture versions 3.1.0 **Description** The issue arises from improper escaping when presenting stored form submissions, allowing an attacker to perform a Cross-Site Scripting attack. **Recommendations** For versions 0.2.0 through 1.0.1, update to version 1.0.2 or later. For versions 1.1.1 through 2.2.4, update to version 2.2.5 or later. For version 3.1.0, update to version 3.1.1 or later.