VULNERABILITY INTELLIGENCE

CVE-2022-28803

CVSS score5.4 MEDIUM

EPSS probability0.54%

CISA KEVNot currently listed

Published2022-06-29

Last modified2026-06-17

Description

In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).