Description
There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.
Remediation
References
Related Vulnerabilities
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
WordPress Plugin Comments-wpDiscuz Arbitrary File Upload (7.0.4)
Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)
WordPress Plugin 3D Slider Slice Box Multiple Cross-Site Scripting Vulnerabilities (1.0)
WordPress Plugin Change Password and E-mail Cross-Site Scripting (1.0)