Silverstripe CMS History XSS Vulnerability
Summary
GHSA-6hh6-59j2-qrxw: Silverstripe History XSS Vulnerability. Affects silverstripe/cms versions >= 3.1.0, < 3.1.10. Fixed in 3.1.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Silverstripe CMS is a content management system that allows users to create and manage websites. It provides a user-friendly interface for editing and publishing content. The CMS page history tab keeps track of changes made to a page, allowing users to compare different versions. However, a cross-site scripting (XSS) vulnerability has been discovered in the page history tab of Silverstripe CMS.
Vulnerability Detail
The XSS vulnerability in Silverstripe CMS can be exploited if a user with CMS access posts malicious or unescaped HTML into any of the text fields on a page and selects the "compare mode" option. In this scenario, the HTML will be embedded into the page without proper escaping, leading to potential XSS attacks. This vulnerability has a CVSS score of 6.1, indicating a moderate severity level. It can allow an attacker to execute arbitrary JavaScript code in the context of a user's browser, potentially compromising sensitive information or performing unauthorized actions.
How To Fix
Minimum fixed version
3.1.10
This is the first release that contains the fix.
composer require silverstripe/cms:3.1.10Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The Silverstripe CMS History XSS vulnerability allows for potential cross-site scripting attacks if a user with CMS access posts malicious or unescaped HTML into a page's text fields and selects the "compare mode" option. To mitigate this vulnerability, it is recommended to update Silverstripe CMS to version 3.1.10 or above. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for silverstripe/cms →
FAQ
Silverstripe CMS is a content management system that allows users to create and manage websites. It provides a user-friendly interface for editing and publishing content.
The page history tab in Silverstripe CMS keeps track of changes made to a page, allowing users to compare different versions and revert to previous versions if needed.
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to the execution of arbitrary code in the context of the user's browser, potentially compromising sensitive information or performing unauthorized actions.
The Silverstripe CMS XSS vulnerability can be exploited if a user with CMS access posts malicious or unescaped HTML into any of the text fields on a page and selects the "compare mode" option. The HTML will be embedded into the page unescaped, allowing the execution of arbitrary JavaScript code.
The Silverstripe CMS XSS vulnerability has a CVSS score of 6.1, indicating a moderate severity level. While it can potentially lead to the execution of arbitrary JavaScript code, it requires a user with CMS access to post malicious or unescaped HTML.
Related vulnerabilities
Recent vulnerabilities recorded for silverstripe/cms.
