CVE-2015-5063: Silverstripe

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username or (2) admin_password parameter to install.php.

Affected products

• Silverstripe Silverstripe: version 3.1.13 only

Published 2015-06-24. Last modified 2026-06-17.