Vendor

    Silverstripe

    98 known vulnerabilities in products by Silverstripe, 0 of them actively exploited (CISA KEV).

    Key figures

    98

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Silverstripe
    CriticalCVE-2019-5715

    SilverStripe: SQL Injection

    		9.8
    HighCVE-2020-9309

    Silverstripe Mimevalidator: security vulnerability

    		8.8
    HighCVE-2026-54718

    Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

    		7.2
    CriticalCVE-2019-12204

    SilverStripe: security vulnerability

    		9.8
    HighCVE-2026-54721

    Silverstripe UserForms: Remote code execution via userforms email subject

    		8.8
    CriticalCVE-2019-12149

    SilverStripe Registry: SQL Injection

    		9.8
    HighCVE-2020-6164

    SilverStripe: security vulnerability

    		7.5
    HighCVE-2020-9280

    SilverStripe: security vulnerability

    		7.5
    HighCVE-2023-40180

    Denial of service vulnerability in silverstripe-graphql via recursive queries

    		7.5
    MediumCVE-2015-8606

    SilverStripe: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2023-28104

    silverstripe/graphql Denial of Service vulnerability

    		7.5
    HighCVE-2022-38148

    Silverstripe Framework: SQL Injection

    		8.8
    MediumCVE-2024-47605

    Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin

    		5.4
    MediumCVE-2017-14498

    SilverStripe: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-26136

    SilverStripe: security vulnerability

    		6.5
    HighCVE-2019-12437

    SilverStripe: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2019-12245

    SilverStripe: Improper Access Control

    		5.3
    MediumCVE-2021-41559

    SilverStripe: security vulnerability

    		6.5
    MediumCVE-2020-26138

    SilverStripe: security vulnerability

    		5.3
    Not ratedCVE-2011-4958

    SilverStripe: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2013-2653

    SilverStripe: security vulnerability

    		—
    Not ratedCVE-2011-4962

    SilverStripe: Deserialization of Untrusted Data

    		—
    MediumCVE-2019-16409

    SilverStripe: security vulnerability

    		5.3
    MediumCVE-2022-24444

    SilverStripe: Session Fixation

    		6.5
    MediumCVE-2017-12849

    SilverStripe: security vulnerability

    		5.3

    All vulnerabilities in search

    Products

    Products by Silverstripe
    SilverStripe640
    Framework150
    Silverstripe-framework70
    Graphql30
    Silverstripe-graphql30