Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
SilverstripeFramework*

15 matches found

CVE
CVE•added 2022/11/22 1:15 p.m.•85 views

CVE-2022-38462

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.

6.1CVSS5.9AI score0.00573EPSS
Web
CVE
CVE•added 2022/11/21 4:15 p.m.•74 views

CVE-2022-38148

Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

8.8CVSS8.8AI score0.00219EPSS
CVE
CVE•added 2022/11/23 2:15 a.m.•72 views

CVE-2022-37430

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).

5.4CVSS5.2AI score0.00323EPSS
CVE
CVE•added 2022/11/23 3:15 a.m.•72 views

CVE-2022-38147

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).

5.4CVSS5.2AI score0.00323EPSS
CVE
CVE•added 2022/06/28 10:15 p.m.•68 views

CVE-2022-25238

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.

5.4CVSS5.2AI score0.00338EPSS
CVE
CVE•added 2022/11/23 2:15 a.m.•68 views

CVE-2022-37429

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.

5.4CVSS5.1AI score0.00323EPSS
CVE
CVE•added 2022/11/23 12:15 a.m.•68 views

CVE-2022-38724

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

5.4CVSS5.4AI score0.00323EPSS
CVE
CVE•added 2022/11/23 2:15 a.m.•60 views

CVE-2022-38145

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view.

5.4CVSS5.2AI score0.00167EPSS
CVE
CVE•added 2022/11/21 4:15 p.m.•58 views

CVE-2022-38146

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).

5.4CVSS5.1AI score0.00323EPSS
CVE
CVE•added 2025/04/10 1:15 p.m.•52 views

CVE-2025-30148

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payloa...

5.4CVSS5.3AI score0.00054EPSS
CVE
CVE•added 2024/07/17 8:15 p.m.•41 views

CVE-2024-32981

Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of ...

5.4CVSS5.3AI score0.00775EPSS
CVE
CVE•added 2025/01/14 11:15 p.m.•40 views

CVE-2024-53277

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There...

5.4CVSS5.3AI score0.00103EPSS
CVE
CVE•added 2023/04/26 3:15 p.m.•39 views

CVE-2023-22729

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Use...

6.1CVSS5.7AI score0.00197EPSS
CVE
CVE•added 2024/01/23 2:15 p.m.•33 views

CVE-2023-48714

Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a GridField using the GridFieldAddExistingAutocompleter component, the recor...

4.3CVSS4.3AI score0.00226EPSS
CVE
CVE•added 2023/04/26 2:15 p.m.•32 views

CVE-2023-22728

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised ...

4.3CVSS4.4AI score0.00334EPSS