CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2024 |
| GHSA-qp29-wcc2-vmpc | 中危4.3 | Silverstripe HtmlEditor embed url sanitisation | 23/05/2024 |
| GHSA-j982-5jv7-v43r | 中危6.1 | Silverstripe Form field validation message XSS vulnerability | 23/05/2024 |
| GHSA-mqf5-275h-gf6r | 中危6.1 | Silverstripe framework is vulnerable to XSS in install.php | 23/05/2024 |
| GHSA-g4hp-pfvf-vm5w | 中危6.5 | SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation | 23/05/2024 |
| GHSA-hq4p-5mpr-jj9m | 中危4.7 | Silverstripe XSS in dev/build returnURL Parameter | 23/05/2024 |
| GHSA-vp8p-c6xj-xpj7 | 中危5.8 | Silverstripe External redirection risk in Security?ReturnURL | 23/05/2024 |
| GHSA-25gq-jvx2-vg9x | 高危7.2 | Silverstripe X-Forwarded-Host request hostname injection | 23/05/2024 |
| GHSA-jqp8-v74p-g8px | 中危6.1 | Silverstripe XSS in Director::force_redirect() | 23/05/2024 |
| GHSA-4h54-vwx9-3vr3 | 中危6.1 | Silverstripe XSS In FormAction | 23/05/2024 |
| GHSA-34q6-xqxh-gq39 | 中危6.1 | Silverstripe XSS In rewritten hash links | 23/05/2024 |
| GHSA-88jp-9jrv-6368 | 中危6.1 | Silverstripe XSS In GridField print | 23/05/2024 |
| GHSA-r32j-mr8p-hfp8 | 中危6.1 | Silverstripe XSS in TreeDropdownField and TreeMultiSelectField | 23/05/2024 |
| GHSA-g43w-98wp-m694 | 中危5.3 | SilverStripe framework XML Quadratic Blowup Attack | 23/05/2024 |
| GHSA-5f5v-5c3v-gw5v | 中危6.1 | Silverstripe IE requests not properly behaving with rewritehashlinks | 23/05/2024 |
| CVE-2023-48714 | 中危4.3 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be | 23/01/2024 |