CVE-2026-54717
1 advisory.
Packagist/silverstripe/cms CVE-2026-54717: medium 5.4, EPSS 0.34%
Silverstripe: XSS in breadcrumbs in page list view
Action: Upgrade silverstripe/cms to 6.2.1 or later.
composer require silverstripe/cms:6.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2.1 | - |
Fixed versions
| 6.2.1 |
Sources
- osv: GHSA-w3cp-g2pf-65wh
- https://github.com/silverstripe/silverstripe-cms/security/advisories/GHSA-w3cp-g2pf-65wh
- https://github.com/silverstripe/silverstripe-cms/pull/3175
- https://github.com/silverstripe/silverstripe-cms/commit/62f9912baa18c80304f3fa8b6eca71bb5dc2d21e
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/cms/CVE-2026-54717.yaml
- https://github.com/silverstripe/silverstripe-cms
- https://github.com/silverstripe/silverstripe-cms/releases/tag/6.2.1
- https://www.silverstripe.org/download/security-releases/cve-2026-54717
CVE-2026-54717 · published · modified · JSON