Stored XSS in link tags added via XHR in SilverStripe Framework
Date: 2022-06
Affected: composer/silverstripe/framework
Attack vector: xss
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2022-28803
CWE: CWE-79
CVSS: 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

SilverStripe Framework 4.x prior to 4.10.9 is vulnerable to cross-site scripting inside the href attribute of an HTML hyperlink, which can be added to website content via XMLHttpRequest (XHR) by an authenticated CMS user.


Mitigations:

Architectural layers (MAESTRO):