Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/userforms@5.4.2
purl pkg:composer/silverstripe/userforms@5.4.2
Next non-vulnerable version 6.4.9
Latest non-vulnerable version 7.1.1
Risk score 4.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-g8wr-r2v2-vqc6
Aliases:
CVE-2026-54721
silverstripe/userforms vulnerable to remote code execution via userforms email subject ### Impact The userform email subject field in the CMS …
6.4.9
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-592m-4533-rxq9
SilverStripe Folders migrated from 3.x may be unsafe to upload to In SilverStripe through 4.5, files uploaded via Forms to … CVE-2020-9280