https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:07:36.743699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-235541 EUVD-2026-235541 2026-10-18T02:07:36.747518+00:00 EUVD-2026-235541 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38724 fkie_cve-2022-38724 2026-10-18T02:07:36.747552+00:00

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

 https://cve.radiocsirt.org/vuln/ghsa-9cx2-hj6m-fv58 GHSA-9cx2-hj6m-fv58 — Silverstripe XSS in shortcodes 2026-10-18T02:07:36.747590+00:00

Affected: Packagist: silverstripe/assets, Packagist: silverstripe/framework

A malicious content author could add arbitrary attributes to HTML editor shortcodes which could be used to inject a JavaScript payload on the front end of the site. The shortcode providers that ship with Silverstripe CMS have been reviewed and attribute whitelists have been implemented where appropriate to negate this risk.

 https://cve.radiocsirt.org/vuln/gsd-2022-38724 gsd-2022-38724 2026-10-18T02:07:36.747617+00:00 gsd-2022-38724