Miggo Logo
Miggo Vulnerability Database
→
CVE-2022-25238

CVE-2022-25238: Stored XSS via HTML fields in SilverStripe Framework

5.4

CVSS Score
3.1

Basic Information

CVE ID
CVE-2022-25238
GHSA ID
GHSA-jx34-gqqq-r6gm
EPSS Score
0.56016%
CWE
CWE-79
Published
6/29/2022
Updated
1/27/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
silverstripe/frameworkcomposer>= 4.0.0, < 4.10.94.10.9

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from insufficient server-side HTML sanitization when processing user-submitted content via XHR. The advisory explicitly links the issue to missing 'sanitise_server_side' configuration and absence of cwp-core module, which would normally enforce sanitization. HTMLEditorField::saveInto and DBHTMLText::setValue are core mechanisms for handling HTML content storage in SilverStripe. Their failure to apply sanitization filters under the described configurations directly enables script tag persistence. These functions are logically implicated given SilverStripe's architecture and the XSS exploitation path described.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

Silv*rStrip* *r*m*work t*rou** *.**.* *llows XSS, insi** o* s*ript t**s t**t **n **n ** ***** to w**sit* *ont*nt vi* X*R *y *n *ut**nti**t** *MS us*r i* t** *wp-*or* mo*ul* is not inst*ll** on t** s*nitis*_s*rv*r_si** *onti* is not s*t to tru* in pro

Reasoning

T** vuln*r**ility st*ms *rom insu**i*i*nt s*rv*r-si** *TML s*nitiz*tion w**n pro**ssin* us*r-su*mitt** *ont*nt vi* X*R. T** **visory *xpli*itly links t** issu* to missin* 's*nitis*_s*rv*r_si**' *on*i*ur*tion *n* **s*n** o* *wp-*or* mo*ul*, w*i** woul