Skip to content
OpenAdvisories

Product · silverstripe

silverstripe-elemental

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-25197

    Silverstripe Elemental enables XSS attacks in elemental "Content blocks in use" reports

    Silverstripe Elemental extends a page type to swap the content area for a list of manageable elements to compose a page out of rather than a single text field. An elemental block can include an XSS payload, which can be executed when viewing the "Content bloc…

    silverstripe silverstripe-elemental dnadesign/silverstripe-elemental Packagist