Silverstripe
53 CVEs across 21 Silverstripe products. Browse Silverstripe vulnerabilities, severities, and proof-of-concept exploits.
Silverstripe products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54717 | Medium | 5.4 | 2026-08-06 | Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed us… |
CVE-2026-54720 | Medium | 5.4 | 2026-07-01 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS i… |
CVE-2026-24749 | Medium | 5.3 | 2026-04-16 | The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2, images rendered in te… |
CVE-2025-30148 | Medium | 5.4 | 2025-04-10 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a spe… |
CVE-2025-25197 | Medium | 5.4 | 2025-04-10 | Silverstripe Elemental extends a page type to swap the content area for a list of manageable elements to compose a page out of rather than a single text field… |
CVE-2024-53277 | Medium | 5.4 | 2025-01-14 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional featu… |
CVE-2024-47605 | Medium | 5.4 | 2025-01-14 | silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an… |
CVE-2024-32981 | Medium | 5.4 | 2024-07-17 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS… |
CVE-2024-29885 | Medium | 4.3 | 2024-07-17 | silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by… |
CVE-2023-49783 | Medium | 4.3 | 2024-01-23 | Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch p… |
CVE-2023-48714 | Medium | 4.3 | 2024-01-23 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user shou… |
CVE-2023-44401 | Medium | 5.3 | 2024-01-23 | The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` p… |
CVE-2023-40180 | High | 7.5 | 2023-10-16 | silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a recursive graphql query to execute a Dist… |
CVE-2023-22729 | Medium | 5.4 | 2023-04-26 | Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can… |
CVE-2023-22728 | Medium | 4.3 | 2023-04-26 | Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField p… |
CVE-2023-28104 | High | 7.5 | 2023-03-16 | `silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql quer… |
CVE-2022-42949 | High | 7.5 | 2022-12-21 | Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions. |
CVE-2022-38147 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3). |
CVE-2022-37421 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/cms through 4.11.0 allows XSS. |
CVE-2022-38145 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and ge… |
CVE-2022-37430 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2). |
CVE-2022-37429 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL… |
CVE-2022-38724 | Medium | 5.4 | 2022-11-23 | Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS. |
CVE-2022-38462 | Medium | 6.1 | 2022-11-22 | Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request. |
CVE-2022-38148 | High | 8.8 | 2022-11-21 | Silverstripe silverstripe/framework through 4.11 allows SQL Injection. |
CVE-2022-38146 | Medium | 5.4 | 2022-11-21 | Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3). |
CVE-2022-28803 | Medium | 5.4 | 2022-06-29 | In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR). |
CVE-2022-29858 | Medium | 4.3 | 2022-06-28 | Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing ima… |
CVE-2022-25238 | Medium | 5.4 | 2022-06-28 | Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS u… |
CVE-2022-24444 | Medium | 6.5 | 2022-06-28 | Silverstripe silverstripe/framework through 4.10 allows Session Fixation. |
CVE-2021-41559 | Medium | 6.5 | 2022-06-28 | Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML document. |
CVE-2022-29254 | Low | 3.7 | 2022-06-09 | silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like… |
CVE-2021-28661 | Medium | 4.3 | 2021-10-07 | Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass. |
CVE-2021-36150 | Medium | 6.1 | 2021-10-07 | SilverStripe Framework through 4.8.1 allows XSS. |
CVE-2020-26136 | Medium | 6.5 | 2021-06-08 | In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication. |
CVE-2020-26138 | Medium | 5.3 | 2021-06-08 | In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation. |
CVE-2020-25817 | Medium | 4.8 | 2021-06-08 | SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to… |
CVE-2020-9311 | Medium | 5.4 | 2020-07-15 | In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for o… |
CVE-2020-9309 | High | 8.8 | 2020-07-15 | Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TX… |
CVE-2020-6165 | Medium | 5.3 | 2020-07-15 | SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The autom… |
CVE-2020-6164 | High | 7.5 | 2020-07-15 | In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a doma… |
CVE-2019-19326 | Medium | 5.9 | 2020-07-15 | Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache… |
CVE-2020-9280 | High | 7.5 | 2020-04-15 | In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This a… |
CVE-2019-12437 | High | 8.8 | 2020-02-19 | In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations, |
CVE-2019-12246 | Medium | 4.3 | 2020-02-19 | SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools. |
CVE-2019-19325 | Medium | 6.1 | 2020-02-17 | SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML… |
CVE-2019-16409 | Medium | 5.3 | 2019-09-26 | In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This gu… |
CVE-2019-14273 | Medium | 5.3 | 2019-09-26 | In SilverStripe assets 4.0, there is broken access control on files. |
CVE-2019-14272 | Medium | 5.4 | 2019-09-26 | In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. |
CVE-2019-12617 | Low | 2.7 | 2019-09-26 | In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution. |
CVE-2019-12245 | Medium | 5.3 | 2019-09-25 | SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in… |
CVE-2019-12205 | Medium | 6.1 | 2019-09-25 | SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS. |
CVE-2019-12204 | Critical | 9.8 | 2019-09-25 | In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access. |
CVE-2019-12203 | Medium | 6.3 | 2019-09-25 | SilverStripe through 4.3.3 allows session fixation in the "change password" form. |
CVE-2019-12149 | Critical | 9.8 | 2019-06-11 | SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry modul… |
CVE-2019-5715 | Critical | 9.8 | 2019-04-11 | All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Inject… |
CVE-2017-18049 | Medium | 5.5 | 2018-01-23 | In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, w… |
CVE-2017-12849 | Medium | 5.3 | 2017-10-12 | Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users v… |
CVE-2017-14498 | Medium | 6.1 | 2017-09-15 | SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pa… |
CVE-2017-5197 | Medium | 6.1 | 2017-03-06 | There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handle… |
CVE-2015-8606 | Medium | 6.1 | 2016-04-13 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbit… |
CVE-2015-5063 | | 2015-06-24 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via th… | |
CVE-2015-5062 | | 2015-06-24 | Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack… | |
CVE-2011-4958 | | 2014-04-08 | Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers t… | |
CVE-2013-6789 | | 2013-11-13 | security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local attackers to obtain sensitive informatio… | |
CVE-2013-2653 | | 2013-11-13 | security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote attackers to conduct phishing attacks w… | |
CVE-2012-6458 | | 2013-08-09 | Multiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary w… | |
CVE-2012-4968 | | 2012-09-17 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web s… | |
CVE-2011-4962 | | 2012-09-17 | code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a… | |
CVE-2011-4961 | | 2012-09-17 | SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges… | |
CVE-2011-4960 | | 2012-09-17 | SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbi… | |
CVE-2011-4959 | | 2012-09-17 | SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far e… | |
CVE-2010-5079 | | 2012-09-17 | SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for (1) the CSRF protection mechanism, (2) autologin, (3) "for… | |
CVE-2010-5078 | | 2012-09-17 | SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, which allows remote a… | |
CVE-2010-4824 | | 2012-09-17 | SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Transl… | |
CVE-2010-4823 | | 2012-09-17 | Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x befo… | |
CVE-2010-4822 | | 2012-09-17 | core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for… | |
CVE-2010-5188 | | 2012-08-26 | SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2)… | |
CVE-2010-5187 | | 2012-08-26 | SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive inform… | |
CVE-2010-5095 | | 2012-08-26 | Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related… | |
CVE-2010-5094 | | 2012-08-26 | The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote att… | |
CVE-2010-5093 | | 2012-08-26 | Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email add… | |
CVE-2010-5092 | | 2012-08-26 | The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive informat… | |
CVE-2010-5091 | | 2012-08-26 | The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privile… | |
CVE-2010-5090 | | 2012-08-26 | SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security. | |
CVE-2010-5089 | | 2012-08-26 | SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information. | |
CVE-2010-5088 | | 2012-08-26 | Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote attackers to hijack the authe… | |
CVE-2010-5087 | | 2012-08-26 | SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack… | |
CVE-2010-5080 | | 2012-08-26 | The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password t… | |
CVE-2012-0976 | | 2012-02-02 | Cross-site scripting (XSS) vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject ar… | |
CVE-2010-1593 | | 2010-04-28 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Comm… | |
CVE-2008-6753 | | 2009-04-27 | SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to AjaxUniqu… | |
CVE-2009-1433 | | 2009-04-24 | SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the… | |
CVE-2007-2321 | | 2007-04-27 | Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors. |