Silverstripe Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Silverstripe Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2022-38148 — CVSS 8.8 (high): Silverstripe silverstripe/framework through 4.11 allows SQL Injection.
• CVE-2022-38462 — CVSS 6.1 (medium): Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login…
• CVE-2022-37430 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).
• CVE-2022-38145 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's…
• CVE-2022-38146 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).
• CVE-2022-38147 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).
• CVE-2022-38724 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow…
• CVE-2025-30148 — CVSS 5.4 (medium): Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the…
• CVE-2022-37429 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by…
• CVE-2024-53277 — CVSS 5.4 (medium): Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is…
• CVE-2022-25238 — CVSS 5.4 (medium): Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an…
• CVE-2023-22729 — CVSS 5.4 (medium): Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version…
• CVE-2024-32981 — CVSS 5.4 (medium): Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit…
• CVE-2023-22728 — CVSS 4.3 (medium): Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version…
• CVE-2023-48714 — CVSS 4.3 (medium): Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and…