Composer silverstripe/cms has 19 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2011-4962 | Silverstripe CMS Arbitrary Code Execution | medium | 0.0 | >=2.4.0 and <2.4.6 | 2.4.6 |
| CVE-2010-1593 | SilverStripe vulnerable to Cross-site Scripting | low | 0.0 | <2.3.5 | 2.3.5 |
| CVE-2015-5062 | Silverstripe CMS Open Redirect | medium | 0.0 | <=3.1.13 | – |
| CVE-2020-9309 | Silverstripe CMS malicious file upload enables script execution | high | 8.8 | <=4.5.0 | – |
| CVE-2020-6164 | Silverstripe CMS information disclosure | high | 7.5 | <=4.5.0 | – |
| CVE-2015-8606 | Silverstripe CMS XSS Vulnerability | medium | 6.1 | <3.1.16 or >=3.2.0 and <3.2.1 | 3.1.16, 3.2.1 |
| CVE-2019-12204 | Missing warning can lead to unauthenticated admin access in SilverStripe | critical | 9.8 | >=4.4.0 and <4.4.4 | 4.4.4 |
| CVE-2017-14498 | Silverstripe CMS XSS Vulnerability | medium | 6.1 | <3.6.1 | 3.6.1 |
| CVE-2017-12849 | Silverstripe CMS User Enumeration | medium | 5.3 | <3.5.5 or >=3.6 and <3.6.1 | 3.5.5, 3.6.1 |
| CVE-2017-5197 | Silverstripe CMS XSS Vulnerability | medium | 6.1 | <3.4.4 or >=3.5.0 and <3.5.2 | 3.4.4, 3.5.2 |
| CVE-2022-37421 | Silverstipe CMS Stored XSS in custom meta tags | medium | 5.4 | >=4.0.0 and <4.11.3 | 4.11.3 |
| CVE-2020-9311 | Silverstripe CMS XSS Vulnerability | medium | 5.4 | <=4.5.0 | – |
| CVE-2026-54717 | Silverstripe: XSS in breadcrumbs in page list view | medium | 5.4 | <6.2.1 | 6.2.1 |
| GHSA-3mm9-2p44-rw39 | Silverstripe SiteTree Creation Permission Vulnerability | high | 7.5 | >=3.0.0 and <3.0.12 or >=3.1.0 and <3.1.11 | 3.0.12, 3.1.11 |
| GHSA-6hh6-59j2-qrxw | Silverstripe History XSS Vulnerability | medium | 6.1 | >=3.1.0 and <3.1.10 | 3.1.10 |
| GHSA-r97r-64vp-fghm | Silverstripe XSS vulnerability via VirtualPage | medium | 6.1 | >=3.1.0 and <3.1.10 | 3.1.10 |
| SS-2015-003-1 | SS-2015-003: History XSS Vulnerability | unknown | 0.0 | >=3.1.0 and <3.1.10 | 3.1.10 |
| SS-2015-005-1 | SS-2015-005: VirtualPage XSS | unknown | 0.0 | >=3.1.0 and <3.1.10 | 3.1.10 |
| SS-2015-008-1 | SS-2015-008: SiteTree Creation Permission Vulnerability | unknown | 0.0 | >=3.0.0 and <3.0.12 or >=3.1.0 and <3.1.11 | 3.0.12, 3.1.11 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked