Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/userforms@3.0.0
purl pkg:composer/silverstripe/userforms@3.0.0
Next non-vulnerable version 6.4.9
Latest non-vulnerable version 7.1.1
Risk score 4.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-g8wr-r2v2-vqc6
Aliases:
CVE-2026-54721
silverstripe/userforms vulnerable to remote code execution via userforms email subject ### Impact The userform email subject field in the CMS …
6.4.9
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-55pp-293f-3365
silverstripe/userforms file upload exposure on UserForms module The [userforms module](https://github.com/silverstripe/silverstripe-userforms) allows CMS administrators to create public facing forms with file …
SS-2015-018-1
Unrestricted Upload of File with Dangerous Type File upload exposure on UserForms module.
SS-2015-018
File upload exposure The userforms module allows CMS administrators to create public facing forms with file upload abilities. These files …