Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 17:21:07 +0000 cnvd-2022-86319 https://cve.radiocsirt.org/vuln/cnvd-2022-86319 cnvd-2022-86319 https://cve.radiocsirt.org/vuln/cnvd-2022-86319 EUVD-2026-235543 https://cve.radiocsirt.org/vuln/euvd-2026-235543 EUVD-2026-235543 https://cve.radiocsirt.org/vuln/euvd-2026-235543 fkie_cve-2022-38462 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38462 <p>Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.</p> <p>Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38462 GHSA-vvxf-r4vm-2vm6 — Reflected XSS in querystring parameters https://cve.radiocsirt.org/vuln/ghsa-vvxf-r4vm-2vm6 <p><strong>Affected:</strong> Packagist: silverstripe/framework</p> <p>An attacker could inject a XSS payload in a Silverstripe CMS response by carefully crafting a return URL on a /dev/build or /Security/login request.</p> <p>To exploit this vulnerability, an attacker would need to convince a user to follow a link with a malicious payload.</p> <p>This will only affect projects configured to output PHP warnings to the browser. By default, Silverstripe CMS will only output PHP warnings if your SS_ENVIRONMENT_TYPE environment variable is set to dev. Production sites should always set SS_ENVIRONMENT_TYPE to live.</p> <p><strong>Affected:</strong> Packagist: silverstripe/framework</p> <p>An attacker could inject a XSS payload in a Silverstripe CMS response by carefully crafting a return URL on a /dev/build or /Security/login request.</p> <p>To exploit this vulnerability, an attacker would need to convince a user to follow a link with a malicious payload.</p> <p>This will only affect projects configured to output PHP warnings to the browser. By default, Silverstripe CMS will only output PHP warnings if your SS_ENVIRONMENT_TYPE environment variable is set to dev. Production sites should always set SS_ENVIRONMENT_TYPE to live.</p> https://cve.radiocsirt.org/vuln/ghsa-vvxf-r4vm-2vm6 gsd-2022-38462 https://cve.radiocsirt.org/vuln/gsd-2022-38462 gsd-2022-38462 https://cve.radiocsirt.org/vuln/gsd-2022-38462