Skip to content
OpenAdvisories

Product · silverstripe

silverstripe-userforms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-54721

    Silverstripe UserForms: Remote code execution via userforms email subject

    Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-si…

    silverstripe silverstripe-userforms silverstripe/userforms Packagist