https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:24:30.705613+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-32981 CVE-2024-32981 — Cross-site Scripting vulnerability with encoded payload in silverstripe/framework 2026-10-08T23:24:30.721155+00:00

Affected: silverstripe-framework

Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitised on the client-side, but server-side sanitisation doesn't catch it. The server-side sanitisation logic has been updated to sanitise against this type of attack in version 5.2.16. All users are advised to upgrade. There are no known workarounds for this vulnerability.