Description In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. Remediation References CVE-2019-14272 Related Vulnerabilities WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Unspecified Vulnerability (1.7.56) WordPress Plugin Uploadify Integration Multiple Cross-Site Scripting Vulnerabilities (0.9.6) Django Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-6873) WebLogic Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-23450) WordPress Plugin Spotlight Cross-Site Scripting (4.7) Severity Medium Classification CVE-2019-14272 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities