Vulnerabilities

TI-2025-21487 CVE-2025-30148 · GHSA-rhx4-hvx9-j387

Silverstripe Framework has a XSS vulnerability in HTML editor

LOW 24

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00298 Published 2025-04-10 Fixed in 5.3.23 CWE-79

TI-2024-35739 CVE-2024-53277 · GHSA-ff6q-3c9c-6cf5

Cross-site Scripting in form messages in silverstripe framework

LOW 24

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00326 Published 2025-01-14 Fixed in 5.3.8 CWE-79

TI-2024-21847 CVE-2024-32981 · GHSA-chx7-9x8h-r5mg

Cross-site Scripting vulnerability with encoded payload in silverstripe/framework

LOW 24

Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00346 Published 2024-07-17 Fixed in 5.2.16 CWE-79

TI-2023-26553 CVE-2023-48714 · GHSA-qm2j-qvq3-j29v

Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter

LOW 20

Silverstripe Framework is the framework that forms the base of the Silverstripe content management system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00355 Published 2024-01-23 Fixed in 4.13.39, 5.1.11 CWE-200

TI-2023-08903 CVE-2023-22729 · GHSA-fw84-xgm8-9jmv

Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen

LOW 28

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2023-04-26 Fixed in 4.12.5 CWE-601

TI-2023-08902 CVE-2023-22728 · GHSA-jh3w-6jp2-vqqm

Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

LOW 21

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00486 Published 2023-04-26 Fixed in 4.12.5 CWE-862

TI-2022-17851 CVE-2022-38147 · GHSA-vv3r-fxqp-vr3f

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).

LOW 25

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0057 Published 2022-11-23 Fixed in 1.11.1 CWE-79

TI-2022-17849 CVE-2022-38145 · GHSA-66jf-xm2m-7m8r

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote…

LOW 25

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00657 Published 2022-11-23 Fixed in 1.11.1 CWE-79

TI-2022-17496 CVE-2022-37430 · GHSA-qw4w-vq8v-2wcv

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).

LOW 25

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0057 Published 2022-11-23 Fixed in 4.11.13 CWE-79

TI-2022-17495 CVE-2022-37429 · GHSA-wc6r-4ggc-79w5

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript…

LOW 25

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2022-11-23 Fixed in 4.11.13 CWE-79

TI-2022-18248 CVE-2022-38724 · GHSA-9cx2-hj6m-fv58

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0…

LOW 26

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00709 Published 2022-11-22 Fixed in 1.11.1, 4.11.13 CWE-79

TI-2022-18086 CVE-2022-38462 · GHSA-vvxf-r4vm-2vm6

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully…

LOW 28

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2022-11-22 Fixed in 4.11.13 CWE-79

TI-2022-17852 CVE-2022-38148 · GHSA-rr8h-f97q-8p9c

Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

MEDIUM 42

Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00804 Published 2022-11-21 Fixed in 4.10.11, 4.11.14 CWE-89

TI-2022-17850 CVE-2022-38146 · GHSA-44xv-v98g-v79f

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).

LOW 25

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00585 Published 2022-11-21 Fixed in 1.11.3 CWE-79

TI-2022-08949 CVE-2022-25238 · GHSA-jx34-gqqq-r6gm

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that…

LOW 26

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_s…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00707 Published 2022-06-28 Fixed in 4.10.9 CWE-79

Vulnerabilities

Filters