Packagist/silverstripe/admin: medium 5.4
Cross-site scripting vulnerabilities in old version of bundled TinyMCE
Action: Upgrade silverstripe/admin to 1.12.7 or later.
composer require silverstripe/admin:1.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.7 | - |
Fixed versions
| 1.12.7 |
Sources
- osv: GHSA-wqm8-jx8r-8rcq
- https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-wqm8-jx8r-8rcq
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/admin/SS-2023-001.yaml
- https://github.com/advisories/GHSA-vrv8-v4w8-f95h
- https://github.com/silverstripe/silverstripe-admin
- https://www.silverstripe.org/download/security-releases/ss-2023-001
- https://www.tiny.cloud/docs/release-notes/release-notes54/#securityfixes
published · modified · JSON