Packagist/andrewhaine/silverstripe-form-capture CVE-2023-28851: medium 6.1, EPSS 0.39%

Silverstripe Form Capture vulnerable to stored cross-site-scripting

Action: Upgrade andrewhaine/silverstripe-form-capture to 1.0.2 or later.

composer require andrewhaine/silverstripe-form-capture:1.0.2

composer require andrewhaine/silverstripe-form-capture:2.2.5

Affected

Fixed versions

Sources

• osv: GHSA-38h6-gmr2-j4wx#Packagist/andrewhaine/silverstripe-form-capture
• https://github.com/bigfork/silverstripe-form-capture/security/advisories/GHSA-38h6-gmr2-j4wx
• https://nvd.nist.gov/vuln/detail/CVE-2023-28851
• https://github.com/bigfork/silverstripe-form-capture/commit/3a7a3c480e3fccddce9c5f359796d45a8302a622
• https://github.com/bigfork/silverstripe-form-capture/commit/5b3aa39dd1eef042f173167b0fa4d3f717971772
• https://github.com/bigfork/silverstripe-form-capture

CVE-2023-28851 · published 2023-04-03T21:06:31Z · modified 2026-09-10T03:49:53.332664314Z · JSON