EUVD-2022-4014

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Multiple cross-site scripting vulnerabilities in SilverStripe CMS & Framework allow remote script injection

Reporter	Title	Published	Views	Family All 7
CNVD	SilverStripe CMS & Framework Cross-Site Scripting Vulnerability	15 Apr 201600:00	–	cnvd
CVE	CVE-2015-8606	13 Apr 201615:00	–	cve
Cvelist	CVE-2015-8606	13 Apr 201615:00	–	cvelist
Github Security Blog	Silverstripe CMS XSS Vulnerability	13 May 202201:13	–	github
NVD	CVE-2015-8606	13 Apr 201615:59	–	nvd
OSV	GHSA-GVC8-XJFP-6569 Silverstripe CMS XSS Vulnerability	13 May 202201:13	–	osv
Prion	Cross site scripting	13 Apr 201615:59	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "53e9ed98-6d1b-3071-9677-f1321134ed69",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b094515d-1ed5-33ef-a633-e896d8208afc",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-8606
cybersecurityworks	www.cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html
github	www.github.com/silverstripe/silverstripe-cms
seclists	www.seclists.org/fulldisclosure/2015/Dec/55
openwall	www.openwall.com/lists/oss-security/2015/12/17/1
openwall	www.openwall.com/lists/oss-security/2015/12/17/11
openwall	www.openwall.com/lists/oss-security/2015/12/18/5
silverstripe	www.silverstripe.org/download/security-releases/ss-2015-026

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 36.1

CVSS 24.3

EPSS0.00407