CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/04/2025 |
| GHSA-74j9-xhqr-6qv3 | 低危 | Reflected Cross Site Scripting (XSS) in error message | 23/01/2025 |
| CVE-2024-53277 | 中危5.4 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the | 14/01/2025 |
| CVE-2024-47605 | 中危5.4 | silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on bot | 14/01/2025 |
| GHSA-mqf3-qpc3-g26q | 低危0.0 | Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message | 14/01/2025 |
| CVE-2024-32981 | 中危5.4 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload | 17/07/2024 |
| GHSA-52cw-pvq9-9m5v | 中危5.4 | Silverstripe uses TinyMCE which allows svg files linked in object tags | 17/07/2024 |
| GHSA-265q-222x-52m6 | 高危8.8 | silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector | 28/05/2024 |
| GHSA-cwgq-83w5-8jfq | 高危7.5 | silverstripe/framework has possible denial of service attack vector when flushing | 28/05/2024 |
| GHSA-m2hh-2m46-x6j5 | 中危6.5 | silverstripe/framework may disclose database credentials during connection failure | 28/05/2024 |
| GHSA-vcg6-8fxc-x5cq | 高危8.8 | silverstripe/framework allows upload of dangerous file types | 27/05/2024 |
| GHSA-crr3-h4m8-7f56 | 中危5.3 | silverstripe/framework vulnerable to member disclosure in login form | 27/05/2024 |
| GHSA-vh7q-j8p5-2h4h | 低危3.5 | silverstripe/framework sends passwords back to browsers under some circumstances | 27/05/2024 |
| GHSA-f43j-8hq4-2xj9 | 中危 | silverstripe/framework uploaded PHP script execution in assets | 27/05/2024 |
| GHSA-vgxh-x8jv-hmff | 高危7.5 | silverstripe/framework code execution vulnerability | 27/05/2024 |
| GHSA-m5q3-mvcr-gc5m | 高危7.5 | silverstripe/framework BackURL validation bypass with malformed URLs | 27/05/2024 |
| GHSA-r3pr-fh25-wrfc | 中危6.5 | silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms | 27/05/2024 |
| GHSA-xpff-c35g-j3cr | 中危6.5 | silverstripe/framework Privilege Escalation Risk in Member Edit form | 27/05/2024 |