Packagist/bigfork/silverstripe-form-capture CVE-2023-28851: medium 6.1, EPSS 0.39%

Silverstripe Form Capture vulnerable to stored cross-site-scripting

Action: Upgrade bigfork/silverstripe-form-capture to 3.1.1 or later.

composer require bigfork/silverstripe-form-capture:3.1.1

Affected

Fixed versions

Sources

• osv: GHSA-38h6-gmr2-j4wx
• https://github.com/bigfork/silverstripe-form-capture/security/advisories/GHSA-38h6-gmr2-j4wx
• https://nvd.nist.gov/vuln/detail/CVE-2023-28851
• https://github.com/bigfork/silverstripe-form-capture/commit/3a7a3c480e3fccddce9c5f359796d45a8302a622
• https://github.com/bigfork/silverstripe-form-capture/commit/5b3aa39dd1eef042f173167b0fa4d3f717971772
• https://github.com/bigfork/silverstripe-form-capture

CVE-2023-28851 · published 2023-04-03T21:06:31Z · modified 2026-09-10T03:49:53.332664314Z · JSON