Security
فارسی
All products

silverstripe/framework

Composer · Package
103 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payloadCVE-2024-32981 · GHSA-CHX7-9X8H-R5MG silverstripe/framework Composer Medium Fix reported
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleterCVE-2023-48714 · GHSA-QM2J-QVQ3-J29VVersion ranges need review. silverstripe/framework Composer Medium Fix reported
Silverstripe Framework: Possible XSS attack through media embedCVE-2026-54720 · GHSA-GVRW-QQP5-JGC5 silverstripe/framework Composer Medium Fix reported
Blind SQL Injection via GridFieldSortableHeaderCVE-2022-38148 · GHSA-RR8H-F97Q-8P9CVersion ranges need review. silverstripe/framework Composer High Fix reported
Silverstripe XSS in shortcodesCVE-2022-38724 · GHSA-9CX2-HJ6M-FV58 silverstripe/assetssilverstripe/framework Composer Medium Fix reported
Reflected XSS in querystring parametersCVE-2022-38462 · GHSA-VVXF-R4VM-2VM6 silverstripe/framework Composer Medium Fix reported
SilverStripe vulnerable to Cross-site ScriptingCVE-2010-1593 · GHSA-WG4M-VVP6-2HC5 silverstripe/cmssilverstripe/framework Composer Low Fix reported
Silverstripe Framework has a XSS vulnerability in HTML editorCVE-2025-30148 · GHSA-RHX4-HVX9-J387 silverstripe/framework Composer Medium Fix reported
Silverstripe Framework user enumeration via timing attack on login and password reset formsGHSA-256Q-HX8W-XCQX · PKSA-7QG6-PYZM-BC35Version ranges need review. silverstripe/framework Composer Medium Fix reported
Silverstripe Flash Clipboard Reflected XSSCVE-2019-12205 · GHSA-RFVW-5848-GXC5Version ranges need review. silverstripe/adminsilverstripe/framework Composer Medium Fix reported
Reflected Cross Site Scripting (XSS) in error messageGHSA-74J9-XHQR-6QV3 · PKSA-24RT-FFR7-CJ1W silverstripe/framework Composer Low Fix reported
Silverstripe Framework has a XSS in form messagesCVE-2024-53277 · GHSA-FF6Q-3C9C-6CF5 silverstripe/framework Composer Medium Fix reported
Silverstripe Framework has a XSS via insert media remote file oembedCVE-2024-47605 · GHSA-7CMP-CGG8-4C82 silverstripe/framework Composer Medium Fix reported
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error messageGHSA-MQF3-QPC3-G26Q · PKSA-8TF6-2HV5-C6TQVersion ranges need review. silverstripe/framework Composer Low Fix reported
Business Logic Errors in SilverStripe FrameworkCVE-2022-0227 · GHSA-32M2-9F76-4GV8 silverstripe/framework Composer Medium Fix reported
Silverstripe CMS Open RedirectCVE-2015-5062 · GHSA-FH35-P8PH-P545 silverstripe/cmssilverstripe/framework Composer Medium No fix reported
silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connectorGHSA-265Q-222X-52M6 · PKSA-VY34-JS2R-WKXJVersion ranges need review. silverstripe/framework Composer High Fix reported
silverstripe/framework may disclose database credentials during connection failureGHSA-M2HH-2M46-X6J5 · PKSA-4BC1-163X-XFZ9Version ranges need review. silverstripe/framework Composer Medium Fix reported
silverstripe/framework has possible denial of service attack vector when flushingGHSA-CWGQ-83W5-8JFQ · PKSA-QT6N-RV4N-MDRHVersion ranges need review. silverstripe/framework Composer High Fix reported
silverstripe/framework CSV Excel Macro InjectionGHSA-MQJC-X563-C9Q8 · PKSA-VXJN-1Q46-F6SFVersion ranges need review. silverstripe/framework Composer High Fix reported