Package · Maven

org.silverpeas.core:silverpeas-core-war

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.5

CVE-2026-53698

Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

Silverpeas Silverpeas org.silverpeas.core:silverpeas-core org.silverpeas.core:silverpeas-core-war Maven

Jun 10, 2026
Medium 6.1

CVE-2026-30139

Silverpeas Core has a reflected cross-site scripting vulnerability

A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input.

org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-war Maven

Apr 22, 2026
Medium 5.4

CVE-2023-47324

Cross-site Scripting in silverpeas

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.

org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-war org.silverpeas.core:silverpeas-core-api org.silverpeas.core:silverpeas-core-configuration Maven

Dec 13, 2023