silverstripe has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was August 2026 with 4. The median CVSS is 5.4 (medium). The most common weakness class is CWE-79 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- silverstripe/cms 1
- silverstripe/framework 1
- silverstripe/userforms 1
- silverstripe/versioned 1
Worst active — by depth score
CVE-2026-54721High· 8.8Silverstripe UserForms provides a visual form builder for the Silverstripe CMS48CVE-2026-55779Medium· 5.4Silverstripe Versioned provides versioning for Silverstripe models30CVE-2026-54720Medium· 5.4Silverstripe Framework: Possible XSS attack through media embed30CVE-2026-54717Medium· 5.4Silverstripe CMS is an open source content management system30
silverstripe vulnerabilities
CVEs affecting silverstripe, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-55779Medium· 5.4Silverstripe Versioned provides versioning for Silverstripe models
Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CAST_HTML and inserts $restoredItem->Ti…
CVE-2026-54720Medium· 5.4Silverstripe Framework: Possible XSS attack through media embed
Silverstripe Framework: Possible XSS attack through media embed
CVE-2026-54721High· 8.8Silverstripe UserForms provides a visual form builder for the Silverstripe CMS
Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted a…
CVE-2026-54717Medium· 5.4Silverstripe CMS is an open source content management system
Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb t…