Description
Silverstripe Framework是Silverstripe开源的一个 CMS 网站框架。 Silverstripe Framework存在跨站脚本漏洞，该漏洞源于内容在包含在表单消息中之前没有得到正确的净化。
Silverstripe Framework 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-32981
https://cve.imfht.com/detail/CVE-2024-53277
https://www.cnvd.org.cn/flaw/show/CNVD-2016-02294
https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-rhx4-hvx9-j387
https://security.snyk.io/vuln/SNYK-PHP-SILVERSTRIPEFRAMEWORK-8625694
https://www.silverstripe.org/blog/silverstripe-cms-security-patches-january-2025
https://advisories.gitlab.com/composer/silverstripe/framework/CVE-2025-30148/
https://www.bastionsecurity.co.nz/advisories/silverstripe-cve-2024-53277