SilverStripe Framework through 4.8.1 allows XSS.
{ "cpes": [ "cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*" ], "severity": "Medium" }