CVE-2020-9311: Silverstripe

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.

Affected products

• Silverstripe Silverstripe: from 3.0.0, before 3.7.5 (fixed in 3.7.5)

Published 2020-07-15. Last modified 2026-06-17.