Description
In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).
Remediation
References
Related Vulnerabilities
MongoDb Improper Authorization Vulnerability (CVE-2025-6713)
Zenphoto Other Vulnerability (CVE-2006-2187)
WordPress Plugin Limit Login Attempts Cross-Site Scripting (1.7.1)
WordPress Plugin Mini Mail Dashboard Widget Cross-Site Scripting (1.42)
Liferay Portal Unchecked Input for Loop Condition Vulnerability (CVE-2025-43801)