Silverstripe Framework: Possible XSS attack through media embed

Description

References

• silverstripe/silverstripe-framework security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-54720 · ADVISORY
• silverstripe/silverstripe-framework#11993 · WEB
• silverstripe/silverstripe-framework commit 1bcb02a · WEB
• FriendsOfPHP/security-advisories · WEB
• silverstripe/silverstripe-framework · PACKAGE
• silverstripe/silverstripe-framework release 6.2.2 · WEB
• silverstripe.org/download/security-releases/cve-2026-54720 · WEB

silverstripe/framework 的其他漏洞

• GHSA-256q-hx8w-xcqx中危 5.3Silverstripe Framework user enumeration via timing attack on login and password reset forms
• CVE-2025-30148中危 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the C…
• GHSA-74j9-xhqr-6qv3低危Reflected Cross Site Scripting (XSS) in error message
• CVE-2024-53277中危 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is a…
• CVE-2024-47605中危 5.4silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmb…