nyeholt/silverstripe-advancedreports

nyeholt/silverstripe-advancedreports

GitHubGitHub
GitHubgithub.com
Releases17
Frequency7 months 5 days
Last Release
Stars13
A reporting module that provides an extra level of configuration and functionality over the base silverstripe structures. Generates static output content in HTML, CSV and PDF formats
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-25102↗
6.1 MEDIUM4.3 MEDIUM

silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.