Silverstripe silverstripe/cms through 4.11.0 allows XSS.
https://github.com/Live-Hack-CVE/CVE-2022-37421
https://github.com/advisories/GHSA-pp74-g2q5-j4jf
https://www.silverstripe.org/download/security-releases/CVE-2022-37421
https://www.silverstripe.org/download/security-releases/
https://www.silverstripe.org/blog/tag/release