https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:43:55.145529+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-332374 EUVD-2026-332374 2026-10-08T14:43:55.147796+00:00 EUVD-2026-332374 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54720 fkie_cve-2026-54720 2026-10-08T14:43:55.147828+00:00

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/

 https://cve.radiocsirt.org/vuln/ghsa-gvrw-qqp5-jgc5 GHSA-gvrw-qqp5-jgc5 — Silverstripe Framework: Possible XSS attack through media embed 2026-10-08T14:43:55.147859+00:00

Affected: Packagist: silverstripe/framework

### Impact The "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed.

### Reported by Jack Wallace from Bastion Security