https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:37:07.554186+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30148 CVE-2025-30148 — Silverstripe Framework has a XSS vulnerability in HTML editor 2026-10-08T12:37:07.555273+00:00

Affected: silverstripe-framework

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitized on the client-side, but server-side sanitization doesn't catch it. The server-side sanitization logic has been updated to sanitize against this attack. This vulnerability is fixed in 5.3.23.