Medium
ghsa-g4hp-pfvf-vm5w
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 94
Reset filters
Medium
ghsa-hq4p-5mpr-jj9m
Silverstripe XSS in dev/build returnURL Parameter
Medium
ghsa-vp8p-c6xj-xpj7
Silverstripe External redirection risk in Security?ReturnURL
High
ghsa-25gq-jvx2-vg9x
Silverstripe X-Forwarded-Host request hostname injection
Medium
ghsa-jqp8-v74p-g8px
Silverstripe XSS in Director::force_redirect()
Medium
ghsa-4h54-vwx9-3vr3
Silverstripe XSS In FormAction
Medium
ghsa-34q6-xqxh-gq39
Silverstripe XSS In rewritten hash links
Medium
ghsa-88jp-9jrv-6368
Silverstripe XSS In GridField print
Medium
ghsa-r32j-mr8p-hfp8
Silverstripe XSS in TreeDropdownField and TreeMultiSelectField
Medium
ghsa-g43w-98wp-m694
SilverStripe framework XML Quadratic Blowup Attack
Medium
ghsa-5f5v-5c3v-gw5v
Silverstripe IE requests not properly behaving with rewritehashlinks
Medium
CVE-2023-48714
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
Low
CVE-2023-32302
Silverstripe Framework: Members with no password can be created and bypass custom login forms
Medium
CVE-2023-22728
Missing permission check of canView in GridFieldPrintButton
Medium
CVE-2023-22729
Open redirect vulnerability on CMSSecurity relogin screen
High
CVE-2022-38148
Blind SQL Injection via GridFieldSortableHeader
Medium
CVE-2022-38462
Reflected XSS in querystring parameters
Medium
CVE-2022-37429
Stored XSS using HTMLEditor
Medium
CVE-2022-37430
Stored XSS using uppercase characters in HTMLEditor
Medium
CVE-2022-38724
Silverstripe XSS in shortcodes
Medium
CVE-2022-38146
URL XSS vulnerability due to outdated jquery in CMS
Medium
CVE-2021-41559
Quadratic blowup in Convert::xml2array()
Medium
CVE-2022-25238
Stored XSS via HTML fields in SilverStripe Framework
Medium
CVE-2022-28803
Stored XSS in link tags added via XHR in SilverStripe Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.