Known vulnerabilities in SilverStripe Framework

Software CPE: cpe:2.3:a:silverstripe:silverstripe_framework:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SilverStripe Framework SilverStripe Framework is affected by 17 known vulnerabilities: 4 medium, 13 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54720
CWE-79 Low
No
No
6.2.2 24.06.2026 SB2026062419
#VU94378 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
5.2.16 17.07.2024 SB2024071702
#VU94377 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-32981
CWE-79 Low
No
No
5.2.16 17.07.2024 SB2024071702
#VU85700 - Permissions, Privileges, and Access Controls
CVE-2023-48714
CWE-264 Low
No
No
4.13.39, 5.1.11 23.01.2024 SB2024012332
#VU85699 - Permissions, Privileges, and Access Controls
CVE-2023-49783
CWE-264 Low
No
No
4.13.39, 5.1.11 23.01.2024 SB2024012332
#VU78788 - Improper Authentication
CVE-2023-32302
CWE-287 Medium
No
No
4.13.14, 5.0.13 31.07.2023 SB2023073124
#VU75663 - Improper Access Control
CVE-2023-22728
CWE-284 Low
No
No
- 02.05.2023 SB2023050220
#VU75662 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22729
CWE-601 Low
No
No
4.12.5 02.05.2023 SB2023050220
#VU64746 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-41559
CWE-611 Medium
No
No
4.10.9, 4.11.0 28.06.2022 SB2022062829
#VU64745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25238
CWE-79 Low
No
No
4.10.9, 4.11.0 28.06.2022 SB2022062829
#VU64744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28803
CWE-79 Low
No
No
4.10.9, 4.11.0 28.06.2022 SB2022062829
#VU54063 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25817
CWE-611 Low
No
No
4.7.4, 4.8.0 11.06.2021 SB2021061109
#VU54062 - Improper input validation
CVE-2020-26138
CWE-20 Low
No
No
4.7.4, 4.8.0 11.06.2021 SB2021061109
#VU31783 - Exposure of sensitive information to an unauthorized actor
CVE-2020-6164
CWE-200 Medium
No
No
4.4.7, 4.5.4, 4.6.0 23.07.2020 SB2020072303
#VU31745 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-19326
CWE-444 Medium
No
No
3.7.5, 4.4.7, 4.5.3, 4.6.0 22.07.2020 SB2020072203
#VU31744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9311
CWE-79 Low
No
No
3.7.5 22.07.2020 SB2020072203
#VU25679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-19325
CWE-79 Low
No
No
4.4.5, 4.5.2 28.02.2020 SB2020022808