silverstripe
Web & CMS Pluginscommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting silverstripe.
- CVE-2026-55779Silverstripe Versioned: XSS in archive admin restore5.4
- CVE-2026-54718Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template7.2
- CVE-2026-54721Silverstripe UserForms: Remote code execution via userforms email subject8.8
- CVE-2026-54717Silverstripe: XSS in breadcrumbs in page list view5.4
- CVE-2026-54720Silverstripe Framework: Possible XSS attack through media embed5.4
- CVE-2026-24749Silverstripe Assets Module has a DBFile::getURL() permission bypass5.3
- CVE-2025-30148Silverstripe Framework has a XSS vulnerability in HTML editor5.4
- CVE-2025-25197Silverstripe Elemental enables XSS attacks in elemental "Content blocks in use" reports5.4
- CVE-2024-53277Cross-site Scripting in form messages in silverstripe framework5.4
- CVE-2024-47605Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin5.4
- CVE-2024-32981Cross-site Scripting vulnerability with encoded payload in silverstripe/framework5.4
- CVE-2024-29885Reports are still accessible even when `canView()` returns false in silverstripe/reports4.3
- CVE-2023-49783No permission checks for editing/deleting records with CSV import form4.3
- CVE-2023-48714Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter4.3
- CVE-2023-44401Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data5.3