Silverstripe Silverstripe-Framework
7 CVEs affecting Silverstripe Silverstripe-Framework. Latest disclosed: 2026-07-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54720 | Medium | 5.4 | 2026-07-01 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS i… |
CVE-2025-30148 | Medium | 5.4 | 2025-04-10 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a spe… |
CVE-2024-53277 | Medium | 5.4 | 2025-01-14 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional featu… |
CVE-2024-32981 | Medium | 5.4 | 2024-07-17 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS… |
CVE-2023-22729 | Medium | 5.4 | 2023-04-26 | Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can… |
CVE-2023-48714 | Medium | 4.3 | 2024-01-23 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user shou… |
CVE-2023-22728 | Medium | 4.3 | 2023-04-26 | Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField p… |