← Back

Advanced Reports Project

advanced_reports_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Advanced Reports
advanced_reports
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-25102
1Advanced Reports Project
1Advanced Reports
Jun 17, 2026
Sep 3, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affect...Show more
silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.Show less