silverstripe/subsites Unsafe SQL Query Construction (Safe Data Source)
There is a low level potential SQL injection vulnerability in the silverstripe/subsites module has been identified and fixed in version 2.1.1.
- Update to 2.1.1
Published Updated
PatchFirst · Latest vulnerabilities
silverstripe/subsites vulnerabilities
Vulnerabilities published for silverstripe/subsites in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2022-42949
Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.
- Update to 2.6.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.