漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Silverstripe Framework has a XSS vulnerability in HTML editor
Vulnerability Description
Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitized on the client-side, but server-side sanitization doesn't catch it. The server-side sanitization logic has been updated to sanitize against this attack. This vulnerability is fixed in 5.3.23.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Silverstripe Framework 跨站脚本漏洞
Vulnerability Description
Silverstripe Framework是Silverstripe开源的一个 CMS 网站框架。 Silverstripe Framework 5.3.23之前版本存在跨站脚本漏洞，该漏洞源于服务器端清理不当，可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A