Search for packages
| purl | pkg:composer/silverstripe/cms@4.0.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-pp74-g2q5-j4jf
Aliases: CVE-2022-37421 GMS-2022-6855 |
Silverstipe CMS Stored XSS in custom meta tags A malicious content author could create a custom meta tag and execute … |
Vulnerable |
|
GHSA-2pw2-qpcp-m47x
Aliases: CVE-2020-9311 |
Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can … | There are no reported fixed by versions. |
|
GHSA-h77w-655f-6j3m
Aliases: CVE-2020-9309 |
Silverstripe CMS malicious file upload enables script execution Silverstripe CMS through 4.5 can be susceptible to script execution from malicious … | There are no reported fixed by versions. |
|
GHSA-gm5x-hpmw-xpxg
Aliases: CVE-2020-6164 |
Silverstripe CMS information disclosure In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can … | There are no reported fixed by versions. |
|
CVE-2019-12204
Aliases: GHSA-cg8j-8w52-735v |
Missing warning can lead to unauthenticated admin access in SilverStripe In SilverStripe through 4.3.3, a missing warning about leaving install.php … |
Vulnerable |
|
GHSA-w3cp-g2pf-65wh
Aliases: CVE-2026-54717 |
Silverstripe: XSS in breadcrumbs in page list view ### Impact Page breadcrumbs in the CMS are vulnerable to XSS when … |
Not vulnerable |