Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/userforms@2.0.6
purl pkg:composer/silverstripe/userforms@2.0.6
Next non-vulnerable version 6.4.9
Latest non-vulnerable version 7.1.1
Risk score 4.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-55pp-293f-3365

silverstripe/userforms file upload exposure on UserForms module The [userforms module](https://github.com/silverstripe/silverstripe-userforms) allows CMS administrators to create public facing forms with file …
3.0.0
Vulnerable
SS-2015-018-1

Unrestricted Upload of File with Dangerous Type File upload exposure on UserForms module.
3.0.0
Vulnerable
SS-2015-018

File upload exposure The userforms module allows CMS administrators to create public facing forms with file upload abilities. These files …
3.0.0
Vulnerable
GHSA-g8wr-r2v2-vqc6
Aliases:
CVE-2026-54721
silverstripe/userforms vulnerable to remote code execution via userforms email subject ### Impact The userform email subject field in the CMS …
6.4.9
Not vulnerable
This package is not known to fix any advisories.