Search for packages
| purl | pkg:composer/silverstripe/cms@3.4.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2pw2-qpcp-m47x
Aliases: CVE-2020-9311 |
Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can … | There are no reported fixed by versions. |
|
GHSA-h77w-655f-6j3m
Aliases: CVE-2020-9309 |
Silverstripe CMS malicious file upload enables script execution Silverstripe CMS through 4.5 can be susceptible to script execution from malicious … | There are no reported fixed by versions. |
|
GHSA-gm5x-hpmw-xpxg
Aliases: CVE-2020-6164 |
Silverstripe CMS information disclosure In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can … | There are no reported fixed by versions. |
|
CVE-2019-12204
Aliases: GHSA-cg8j-8w52-735v |
Missing warning can lead to unauthenticated admin access in SilverStripe In SilverStripe through 4.3.3, a missing warning about leaving install.php … |
Vulnerable |
|
GHSA-j696-6m57-mcrv
Aliases: CVE-2017-14498 |
Silverstripe CMS XSS Vulnerability SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the … |
Vulnerable Vulnerable |
|
GHSA-fwhr-g5r4-xgxf
Aliases: CVE-2017-12849 |
Silverstripe CMS User Enumeration Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x … |
Vulnerable Vulnerable |
|
GHSA-w3cp-g2pf-65wh
Aliases: CVE-2026-54717 |
Silverstripe: XSS in breadcrumbs in page list view ### Impact Page breadcrumbs in the CMS are vulnerable to XSS when … |
Not vulnerable |