silverstripe vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20234
3. 20245
4. 20254
5. 20267

Newest CVEs

• CVE-2026-55186

  Silverstripe MFA: Can bypass MFA during password reset flow

  silverstripe · silverstripe-mfa

  Medium4.2
• CVE-2026-55779

  Silverstripe Versioned: XSS in archive admin restore

  silverstripe · silverstripe-versioned

  Medium5.4
• CVE-2026-54718

  Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

  silverstripe · silverstripe-advancedworkflow

  High7.2
• CVE-2026-54721

  Silverstripe UserForms: Remote code execution via userforms email subject

  silverstripe · silverstripe-userforms

  High8.8
• CVE-2026-54717

  Silverstripe: XSS in breadcrumbs in page list view

  silverstripe · silverstripe-cms

  Medium5.4
• CVE-2026-54720

  Silverstripe Framework: Possible XSS attack through media embed

  silverstripe · silverstripe-framework

  Medium5.4
• CVE-2026-24749

  Silverstripe Assets Module has a DBFile::getURL() permission bypass

  silverstripe · silverstripe-assets

  Medium5.3
• CVE-2025-30148

  Silverstripe Framework has a XSS vulnerability in HTML editor

  silverstripe · silverstripe-framework

  Medium5.4
• CVE-2025-25197

  Silverstripe Elemental enables XSS attacks in elemental "Content blocks in use" reports

  silverstripe · silverstripe-elemental

  Medium5.4
• CVE-2024-53277

  Cross-site Scripting in form messages in silverstripe framework

  silverstripe · silverstripe-framework

  Medium5.4