Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Tommcclymont

#42884de 53,635
6.1CVSS total
Vulnerabilidades · 1
PT-2023-22008
6.1
2023-04-03
Silverstripe · Silverstripe Form Capture · CVE-2023-28851
**Name of the Vulnerable Software and Affected Versions** Silverstripe Form Capture versions 0.2.0 through 1.0.1 Silverstripe Form Capture versions 1.1.1 through 2.2.4 Silverstripe Form Capture versions 3.1.0 **Description** The issue arises from improper escaping when presenting stored form submissions, allowing an attacker to perform a Cross-Site Scripting attack. **Recommendations** For versions 0.2.0 through 1.0.1, update to version 1.0.2 or later. For versions 1.1.1 through 2.2.4, update to version 2.2.5 or later. For version 3.1.0, update to version 3.1.1 or later.