Packagist/silverstripe/comments: medium 4.4
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
Action: Upgrade silverstripe/comments to 3.1.1 or later.
composer require silverstripe/comments:3.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.0 | 3.1.1 | - |
Fixed versions
| 3.1.1 |
Sources
- osv: GHSA-frm9-7pm9-5rgc
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/comments/SS-2018-015-1.yaml
- https://github.com/silverstripe/silverstripe-comments
- https://www.silverstripe.org/download/security-releases/ss-2018-015
published · modified · JSON