CVE-2026-54717

5.4 Moyenne

Publiée le 07/08/2026 à 00:17 · Modifiée le 24/10/2026 à 18:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.

Traduire en français

Produits concernés

silverstripe-cms

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://github.com/silverstripe/silverstripe-cms/commit/62f9912baa18c80304f3fa8b6eca71bb5dc2d21e
https://github.com/silverstripe/silverstripe-cms/pull/3175
https://github.com/silverstripe/silverstripe-cms/releases/tag/6.2.1
https://github.com/silverstripe/silverstripe-cms/security/advisories/GHSA-w3cp-g2pf-65wh

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories