Packagist/silverstripe/admin: medium
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
Action: Upgrade silverstripe/admin to 1.13.6 or later.
composer require silverstripe/admin:1.13.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.13.6 | - |
Fixed versions
| 1.13.6 |
Sources
- osv: GHSA-jxcx-3h54-qqxx
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/admin/SS-2023-002.yaml
- https://github.com/silverstripe/silverstripe-admin
- https://www.silverstripe.org/download/security-releases/SS-2023-002
published · modified · JSON