Search for packages
| purl | pkg:composer/silverstripe/framework@5.3.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rhx4-hvx9-j387
Aliases: CVE-2025-30148 |
Silverstripe Framework has a XSS vulnerability in HTML editor ### Impact A bad actor with access to edit content in … |
Vulnerable |
|
GHSA-256q-hx8w-xcqx
|
Silverstripe Framework user enumeration via timing attack on login and password reset forms ### Impact User enumeration is possible by … |
Vulnerable |
|
GHSA-gvrw-qqp5-jgc5
Aliases: CVE-2026-54720 |
Silverstripe Framework: Possible XSS attack through media embed ### Impact The "Insert media from web" functionality in the CMS is … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-74j9-xhqr-6qv3
|
Reflected Cross Site Scripting (XSS) in error message If a website has been set to the "dev" environment mode, a … | |
|
GHSA-7cmp-cgg8-4c82
|
Silverstripe Framework has a XSS via insert media remote file oembed ### Impact When using the "insert media" functionality, the … |
CVE-2024-47605
|
|
GHSA-mqf3-qpc3-g26q
|
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message > [!IMPORTANT] > This vulnerability only affects sites … | |
|
GHSA-ff6q-3c9c-6cf5
|
Silverstripe Framework has a XSS in form messages In some cases, form messages can contain HTML markup. This is an … |
CVE-2024-53277
|