Packagist/silverstripe/admin: medium 5.4

Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE

Action: Upgrade silverstripe/admin to 1.13.6 or later.

composer require silverstripe/admin:1.13.6

Affected

Fixed versions

Sources

• osv: GHSA-4q66-g4mm-8rg5
• https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-4q66-g4mm-8rg5
• https://github.com/silverstripe/silverstripe-admin/commit/cafc1c4de58f1553b019dc2f8a62f835cabdbeb2
• https://github.com/advisories/GHSA-5h9g-x5rv-25wg
• https://github.com/advisories/GHSA-w7jx-j77m-wp65
• https://github.com/silverstripe/silverstripe-admin

published 2023-07-31T22:02:35Z · modified 2024-12-02T05:44:34.311558Z · JSON