https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:33:34.055610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-228211 EUVD-2026-228211 2026-10-09T06:33:34.104765+00:00 EUVD-2026-228211 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25197 fkie_cve-2025-25197 2026-10-09T06:33:34.104808+00:00

Silverstripe Elemental extends a page type to swap the content area for a list of manageable elements to compose a page out of rather than a single text field. An elemental block can include an XSS payload, which can be executed when viewing the "Content blocks in use" report. The vulnerability is specific to that report and is a result of failure to cast input prior to including it in the grid field. This vulnerability is fixed in 5.3.12.

 https://cve.radiocsirt.org/vuln/ghsa-x8xm-c7p8-2pj2 GHSA-x8xm-c7p8-2pj2 — Silverstripe cross-site scripting (XSS) attack in elemental "Content blocks in use" report 2026-10-09T06:33:34.104847+00:00

Affected: Packagist: dnadesign/silverstripe-elemental

An elemental block can include an XSS payload, which can be executed when viewing the "Content blocks in use" report.

The vulnerability is specific to that report and is a result of failure to cast input prior to including it in the grid field.

### References

- https://www.silverstripe.org/download/security-releases/CVE-2025-25197