CVE-2026-54720

Packagist/silverstripe/framework CVE-2026-54720: medium 5.4, EPSS 0.26%

Silverstripe Framework: Possible XSS attack through media embed

Action: Upgrade silverstripe/framework to 6.2.2 or later.

composer require silverstripe/framework:6.2.2

Affected

Fixed versions

Sources

• osv: GHSA-gvrw-qqp5-jgc5
• https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-gvrw-qqp5-jgc5
• https://nvd.nist.gov/vuln/detail/CVE-2026-54720
• https://github.com/silverstripe/silverstripe-framework/pull/11993
• https://github.com/silverstripe/silverstripe-framework/commit/1bcb02adfc365c6436dc26ab2f6dd32d97f3979b
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2026-54720.yaml
• https://github.com/silverstripe/silverstripe-framework
• https://github.com/silverstripe/silverstripe-framework/releases/tag/6.2.2
• https://www.silverstripe.org/download/security-releases/cve-2026-54720

CVE-2026-54720 · published 2026-08-27T16:49:47Z · modified 2026-08-27T17:00:40.953971822Z · JSON