GHSA-w3cp-g2pf-65whmedium5.4
Silverstripe: XSS in breadcrumbs in page list view
Impact
Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
silverstripe/cms Packagist
| Affected range | Recorded fix |
|---|---|
| Earlier releases before 6.2.1Ecosystem versions | 6.2.1 |
Version evidence: OSV · GHSA-w3cp-g2pf-65wh
View original version evidence (348 explicit versions)
Original source description
Impact
Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view
Reporter
Fase Rais Baradika
References
- Security advisory github.com/silverstripe/silverstripe-cms/security/advisories/GHSA-w3cp-g2pf-65wh
- Patch github.com/silverstripe/silverstripe-cms/pull/3175
- Patch github.com/silverstripe/silverstripe-cms/commit/62f9912baa18c80304f3fa8b6eca71bb5dc2d21e
- Security advisory github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/cms/CVE-2026-54717.yaml
- Source reference github.com/silverstripe/silverstripe-cms
- Release notes github.com/silverstripe/silverstripe-cms/releases/tag/6.2.1
- Security advisory www.silverstripe.org/download/security-releases/cve-2026-54717