1567 matches found
CVE-2026-55186
Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An attacker with access to t...
CVE-2026-55186
The Silverstripe MFA component in Silverstripe CMS 5 is vulnerable to an authentication bypass during the password reset flow. An attacker with access to a user's email account can exploit this flow to change a password and obtain a logged-in session before completing the required multi-factor au...
CVE-2026-55186 Silverstripe MFA: Can bypass MFA during password reset flow
Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An attacker with access to t...
EUVD-2026-116372
Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An attacker with access to t...
droopescan
droopescan A plugin-based scanner that aids security researchers in identifying issues with several CMS. Usage of droopescan for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume n...
silverstripe-cms-authz-poc
SilverStripe CMS — authorization flaws F1 / F4 Status: pu...
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...
GHSA-68WQ-PHQ7-P2VG MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
Impact In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected...
CVE-2026-88992 - Userforms CSV export restricted file access
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88992...
CVE-2026-91111 - Uploaded XML XSS
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91111...
CVE-2026-88991 - RCE in email subject field via template execution
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88991...
CVE-2026-91114 - Stored XSS via unescaped permission in PermissionCheckboxSetField
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91114...
CVE-2026-91115 - RCE via i18nTextCollectorTask writer parameter
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91115...
CVE-2026-91110 - XSS using control bytes
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91110...
CVE-2026-88988 - XSS via SVG data URI
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88988...
CVE-2026-91113 - User-controlled ClassName allows unauthorized record type change
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91113...
CVE-2026-91112 - CMS_ACCESS_SecurityAdmin privilege escalation
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91112...
CVE-2026-88987 - XSS via XHTML data URI
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88987...
CVE-2026-88990 - RCE in email template field via template execution
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88990...
CVE-2026-55779
Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CASTHTML and inserts $restoredItem-Title, $restoredItem-URLSegment, $restoredItem-CMSEditLink, and...