Filtered by vendor Advanced Reports Project
Subscriptions
Filtered by product Advanced Reports
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-25102 | 1 Advanced Reports Project | 1 Advanced Reports | 2024-11-21 | 6.1 Medium |
| silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter. | ||||
Page 1 of 1.