CVE-2022-38145

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.

• CWE-79
• CWE-79

• https://forum.silverstripe.org/c/releasesRelease Notes, Vendor Advisory
• https://www.silverstripe.org/blog/tag/releasePatch, Vendor Advisory
• https://www.silverstripe.org/download/security-releases/Vendor Advisory
• https://www.silverstripe.org/download/security-releases/CVE-2022-38145Vendor Advisory
• https://forum.silverstripe.org/c/releasesRelease Notes, Vendor Advisory
• https://www.silverstripe.org/blog/tag/releasePatch, Vendor Advisory
• https://www.silverstripe.org/download/security-releases/Vendor Advisory
• https://www.silverstripe.org/download/security-releases/CVE-2022-38145Vendor Advisory

Published

Nov 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3814A vulnerability classified as problematic was found in Axiom…6.5
• CVE-2022-38140Auth. (contributor+) Arbitrary File Upload in SEO Plugin by …8.8
• CVE-2022-38141Missing Authorization vulnerability in Zorem Sales Report Em…6.5
• CVE-2022-38142 Delta Electronics InfraSuite Device Master versions 00.00.0…9.8
• CVE-2022-38143A heap out-of-bounds write vulnerability exists in the way O…9.8
• CVE-2022-38144Cross-Site Request Forgery (CSRF) vulnerability in gVectors …8.8
• CVE-2022-38146Silverstripe silverstripe/framework through 4.11 allows XSS …5.4
• CVE-2022-38147Silverstripe silverstripe/framework through 4.11 allows XSS …5.4
• CVE-2022-38148Silverstripe silverstripe/framework through 4.11 allows SQL …8.8
• CVE-2022-38149HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 m…7.5
• CVE-2022-3815A vulnerability, which was classified as problematic, has be…6.5
• CVE-2022-38150In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possi…7.5