CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2022-25238
Severity
MEDIUM
CVSS
5.4
EPSS
0.66%
Original NVD Description
Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)