What’s Vulnerable › Products

silverstripe-framework vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your silverstripe-framework version is affected

Latest silverstripe-framework vulnerabilities

• CVE-2026-54720 — Silverstripe Framework: Possible XSS attack through media embed (CVSS 5.4)
• CVE-2025-30148 — Silverstripe Framework has a XSS vulnerability in HTML editor (CVSS 5.4)
• CVE-2024-53277 — Cross-site Scripting in form messages in silverstripe framework (CVSS 5.4)
• CVE-2024-32981 — Cross-site Scripting vulnerability with encoded payload in silverstripe/framework (CVSS 5.4)
• CVE-2023-48714 — Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter (CVSS 4.3)
• CVE-2023-22729 — Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen (CVSS 6.1)
• CVE-2023-22728 — Silverstripe Framework has missing permission check of canView in GridFieldPrintButton (CVSS 4.3)
• CVE-2022-38147 — (CVSS 5.4)
• CVE-2022-38145 — (CVSS 5.4)
• CVE-2022-37430 — (CVSS 5.4)
• CVE-2022-37429 — (CVSS 5.4)
• CVE-2022-38724 — (CVSS 5.4)
• CVE-2022-38462 — (CVSS 6.1)
• CVE-2022-38148 — (CVSS 8.8)
• CVE-2022-38146 — (CVSS 5.4)
• CVE-2022-25238 — (CVSS 5.4)