silverstripe/versioned has XSS in archive admin restore
It's possible to use the page title as an XSS vector when restoring a page in ArchiveAdmin
Advisories for Composer/Silverstripe/Versioned package
2026
It's possible to use the page title as an XSS vector when restoring a page in ArchiveAdmin