CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2024 |
| GHSA-qp29-wcc2-vmpc | MEDIO4.3 | Silverstripe HtmlEditor embed url sanitisation | 23/05/2024 |
| GHSA-j982-5jv7-v43r | MEDIO6.1 | Silverstripe Form field validation message XSS vulnerability | 23/05/2024 |
| GHSA-mqf5-275h-gf6r | MEDIO6.1 | Silverstripe framework is vulnerable to XSS in install.php | 23/05/2024 |
| GHSA-g4hp-pfvf-vm5w | MEDIO6.5 | SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation | 23/05/2024 |
| GHSA-hq4p-5mpr-jj9m | MEDIO4.7 | Silverstripe XSS in dev/build returnURL Parameter | 23/05/2024 |
| GHSA-vp8p-c6xj-xpj7 | MEDIO5.8 | Silverstripe External redirection risk in Security?ReturnURL | 23/05/2024 |
| GHSA-25gq-jvx2-vg9x | ALTO7.2 | Silverstripe X-Forwarded-Host request hostname injection | 23/05/2024 |
| GHSA-jqp8-v74p-g8px | MEDIO6.1 | Silverstripe XSS in Director::force_redirect() | 23/05/2024 |
| GHSA-4h54-vwx9-3vr3 | MEDIO6.1 | Silverstripe XSS In FormAction | 23/05/2024 |
| GHSA-34q6-xqxh-gq39 | MEDIO6.1 | Silverstripe XSS In rewritten hash links | 23/05/2024 |
| GHSA-88jp-9jrv-6368 | MEDIO6.1 | Silverstripe XSS In GridField print | 23/05/2024 |
| GHSA-r32j-mr8p-hfp8 | MEDIO6.1 | Silverstripe XSS in TreeDropdownField and TreeMultiSelectField | 23/05/2024 |
| GHSA-g43w-98wp-m694 | MEDIO5.3 | SilverStripe framework XML Quadratic Blowup Attack | 23/05/2024 |
| GHSA-5f5v-5c3v-gw5v | MEDIO6.1 | Silverstripe IE requests not properly behaving with rewritehashlinks | 23/05/2024 |
| CVE-2023-48714 | MEDIO4.3 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be | 23/01/2024 |