CVE-2026-54720: Silverstripe Silverstripe-Framework

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/

Affected products

• Silverstripe Silverstripe-Framework: before 6.2.2 (fixed in 6.2.2)

Published 2026-07-01. Last modified 2026-07-02.