{"action":"Upgrade silverstripe/framework to 6.2.2 or later.","affected":[{"fixed":"6.2.2","introduced":"0"}],"component":"silverstripe/framework","cve_ids":["CVE-2026-54720"],"ecosystem":"Packagist","epss":0.00263,"exploited":false,"fixed_versions":["6.2.2"],"ghsa_id":"GHSA-gvrw-qqp5-jgc5","id":"tcs_01M5KF355Y0M03F0B5JSHBMJVF","modified_at":"2026-08-27T17:00:40.953971822Z","published_at":"2026-08-27T16:49:47Z","references":["https://osv.dev/vulnerability/GHSA-gvrw-qqp5-jgc5","https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-gvrw-qqp5-jgc5","https://nvd.nist.gov/vuln/detail/CVE-2026-54720","https://github.com/silverstripe/silverstripe-framework/pull/11993","https://github.com/silverstripe/silverstripe-framework/commit/1bcb02adfc365c6436dc26ab2f6dd32d97f3979b","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2026-54720.yaml","https://github.com/silverstripe/silverstripe-framework","https://github.com/silverstripe/silverstripe-framework/releases/tag/6.2.2","https://www.silverstripe.org/download/security-releases/cve-2026-54720"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gvrw-qqp5-jgc5","url":"https://osv.dev/vulnerability/GHSA-gvrw-qqp5-jgc5"}],"summary":"Silverstripe Framework: Possible XSS attack through media embed"}