Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/cms@4.11.0-beta1
purl pkg:composer/silverstripe/cms@4.11.0-beta1
Next non-vulnerable version 4.11.3
Latest non-vulnerable version 4.11.3
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4x32-t75c-u3bj
Aliases:
CVE-2022-37421
GHSA-pp74-g2q5-j4jf
GMS-2022-6855
Silverstipe CMS Stored XSS in custom meta tags A malicious content author could create a custom meta tag and execute an arbitrary JavaScript payload. This would require convincing a legitimate user to access a page and enter a custom keyboard shortcut. This requires CMS access to exploit.
4.11.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:16:06.750657+00:00 GitLab Importer Affected by VCID-4x32-t75c-u3bj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/silverstripe/cms/GMS-2022-6855.yml 38.4.0
2026-04-11T23:33:22.850891+00:00 GitLab Importer Affected by VCID-4x32-t75c-u3bj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/silverstripe/cms/GMS-2022-6855.yml 38.3.0
2026-04-05T02:28:37.245553+00:00 GitLab Importer Affected by VCID-4x32-t75c-u3bj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/silverstripe/cms/GMS-2022-6855.yml 38.1.0