Skip to content
OpenAdvisories

Package · Packagist

silverstripe/userforms

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-54721

    Silverstripe UserForms: Remote code execution via userforms email subject

    Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-si…

    silverstripe silverstripe-userforms silverstripe/userforms Packagist
  • High 7.5
    CVE-2020-9280

    SilverStripe Folders migrated from 3.x may be unsafe to upload to

    In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureasse…

    silverstripe/framework silverstripe/assets silverstripe/userforms Packagist