Description
Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information.
Remediation
References
Related Vulnerabilities
WordPress Plugin All Video Gallery 'vid' Parameter Multiple SQL Injection Vulnerabilities (1.1)
WordPress Plugin WP e-Commerce Shop Styling Remote File Inclusion (1.7.2)
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-25497)
WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.6)