SilverStripe 2.3.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*

part: a version: 2.3.2 update: *

VendorSilverstripe (fb3ee4e6-70c4-5017-82a7-81441bb33bd1)
ProductSilverstripe (a3b26fc2-6e91-5c07-b521-62f2382ac950)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/silverstripe/silverstripe-cms purl2cpe 2026-06-01 10:14:20.994002

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4968 vulnerable 2026-06-08 05:02:53.450018 Details available
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-16T19:11:05.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4961 vulnerable 2026-06-08 04:59:34.064902 Details available
SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-16T17:19:06.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4960 vulnerable 2026-06-08 04:59:34.064194 Details available
SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-17T00:52:26.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4959 vulnerable 2026-06-08 04:59:34.063456 Details available
SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-09-17T17:00:00.000Z
Updated: 2024-09-17T02:10:53.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4958 vulnerable 2026-06-08 04:59:34.052758 Details available
Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/.
Published: 2014-04-08T14:00:00.000Z
Updated: 2024-08-07T00:23:39.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5188 vulnerable 2026-06-08 04:56:32.422316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5187 vulnerable 2026-06-08 04:56:32.421618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5095 vulnerable 2026-06-08 04:56:32.142114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5094 vulnerable 2026-06-08 04:56:32.141485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5093 vulnerable 2026-06-08 04:56:32.140889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5091 vulnerable 2026-06-08 04:56:32.139807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5090 vulnerable 2026-06-08 04:56:32.139083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5089 vulnerable 2026-06-08 04:56:32.138105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5088 vulnerable 2026-06-08 04:56:32.127841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5087 vulnerable 2026-06-08 04:56:32.123953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5080 vulnerable 2026-06-08 04:56:32.103903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5079 vulnerable 2026-06-08 04:56:32.096075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5078 vulnerable 2026-06-08 04:56:32.095290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4824 vulnerable 2026-06-08 04:56:31.223319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4823 vulnerable 2026-06-08 04:56:31.217408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1593 vulnerable 2026-06-08 04:54:09.227866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.