CVE-2026-54717: Improper Neutralization of Input During Web Page Generation

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

PT-2026-68756

Name of the Vulnerable Software and Affected Versions Silverstripe CMS versions prior to 6.2.1 Description Page breadcrumbs in the CMS are susceptible to cross-site scripting XSS when accessed via the page list view. This occurs because page titles are rendered into the breadcrumb trail without...

PT-2026-68987

Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view Reporter Fase Rais Baradika...

CVE-2012-1169

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs...

CVE-2012-1169: Exposure of Sensitive Information to an Unauthorized Actor

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs...

PT-2019-6745

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue concerns the disclosure of personal information. When the administrative setting for users' name display is set to show only the first name, full names are still displayed in page breadcrumb...