Lucene search
GoogleOSV:GHSA-XGPF-P52J-PF7MHistoryMar 24, 2021 - 5:42 p.m.
XSS in CreateQueuedJobTask
2021-03-2417:42:02
Google
osv.dev
10
silverstripe cms
symbiote
queuedjobs
cross site scripting
arbitrary payload
dev task
url injection
EPSS
0.001
Percentile
29.3%
A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.
Related
github
github
XSS in CreateQueuedJobTask
2021-03-24 17:42:02
nvd
nvd
CVE-2021-27938
2021-03-16 16:15:14
prion
prion
Cross site scripting
2021-03-16 16:15:00
cvelist
cvelist
CVE-2021-27938
2021-03-16 15:09:39
osv
osv
CVE-2021-27938
2021-03-16 16:15:14
veracode
veracode
Cross-site Scripting (XSS)
2021-03-17 02:15:25
friendsofphp
friendsofphp
CVE-2021-27938: XSS in CreateQueuedJobTask
2021-03-17 00:32:00
cve
cve
CVE-2021-27938
2021-03-16 16:15:14