p PatchFirst

PatchFirst · Latest vulnerabilities

silverstripe/framework 6.1.12: known vulnerabilities

Known vulnerability affecting silverstripe/framework 6.1.12: 1. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-54720

    Medium · CVSS 5.4EPSS 0.26%Fix available

    Silverstripe Framework: Possible XSS attack through media embed

    Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/

    silverstripe/frameworkPHP
    • Update to 6.2.2
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →