CVE-2021-27938

Published: Mar 16, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.

Affected (9)

Products: Symbiote: Silverstripe Queued Jobs

Symbiote

1 product

Silverstripe Queued Jobs

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Symbiote Silverstripe Queued Jobs	From 3.0.0 to 3.0.2
Symbiote Silverstripe Queued Jobs	From 3.1.0 to 3.1.4
Symbiote Silverstripe Queued Jobs	From 4.0.0 to 4.0.7
Symbiote Silverstripe Queued Jobs	From 4.1.0 to 4.1.2
Symbiote Silverstripe Queued Jobs	From 4.2.0 to 4.2.4
Symbiote Silverstripe Queued Jobs	From 4.3.0 to 4.3.3
Symbiote Silverstripe Queued Jobs	From 4.4.0 to 4.4.3
Symbiote Silverstripe Queued Jobs	From 4.5.0 to 4.5.1
Symbiote Silverstripe Queued Jobs	From 4.6.0 to 4.6.4