Search for packages
| purl | pkg:composer/silverstripe/cms@3.1.18-rc2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2pw2-qpcp-m47x
Aliases: CVE-2020-9311 |
Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can … | There are no reported fixed by versions. |
|
GHSA-h77w-655f-6j3m
Aliases: CVE-2020-9309 |
Silverstripe CMS malicious file upload enables script execution Silverstripe CMS through 4.5 can be susceptible to script execution from malicious … | There are no reported fixed by versions. |
|
GHSA-gm5x-hpmw-xpxg
Aliases: CVE-2020-6164 |
Silverstripe CMS information disclosure In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can … | There are no reported fixed by versions. |
|
SS-2015-023
|
Advanced workflow member field exposure By default, the CMS Admin editable template for the NotifyUsers action has access to a … |
Vulnerable |
|
CVE-2019-12204
Aliases: GHSA-cg8j-8w52-735v |
Missing warning can lead to unauthenticated admin access in SilverStripe In SilverStripe through 4.3.3, a missing warning about leaving install.php … |
Vulnerable |
|
GHSA-j696-6m57-mcrv
Aliases: CVE-2017-14498 |
Silverstripe CMS XSS Vulnerability SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the … |
Vulnerable Vulnerable |
|
GHSA-fwhr-g5r4-xgxf
Aliases: CVE-2017-12849 |
Silverstripe CMS User Enumeration Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x … |
Vulnerable Vulnerable |
|
GHSA-xmjh-wjc5-wg4h
Aliases: CVE-2017-5197 |
Silverstripe CMS XSS Vulnerability There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is … |
Vulnerable Vulnerable |
|
GHSA-w3cp-g2pf-65wh
Aliases: CVE-2026-54717 |
Silverstripe: XSS in breadcrumbs in page list view ### Impact Page breadcrumbs in the CMS are vulnerable to XSS when … |
Not vulnerable |