CVE-2026-54717: XSS

Published Aug 6, 2026

Updated

Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view

Reporter Fase Rais Baradika

Affected Software

1 affected componentFixes available

composer/silverstripe/cms<6.2.1

6.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade composer/silverstripe/cms to a version that resolves this vulnerability.
Fixed in 6.2.1

Event History

Aug 6, 2026

Advisory Published

via GitHub·08:27 PM

Data Sourced

via GitHub·08:27 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-54717?

CVE-2026-54717 has a medium severity rating of 5.4.

What type of vulnerability is found in CVE-2026-54717?

CVE-2026-54717 is classified as a Cross-Site Scripting (XSS) vulnerability.

What is the impact of CVE-2026-54717 on the CMS?

CVE-2026-54717 allows for XSS attacks via page breadcrumbs when viewed in the page list view.

How do I fix CVE-2026-54717?

To address CVE-2026-54717, ensure that you are using the latest version of the Silverstripe CMS that contains the security patch.

Who reported CVE-2026-54717?

CVE-2026-54717 was reported by Fase Rais Baradika.

CVE-2026-54717: XSS

Affected Software

Remediation

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-54717?

What type of vulnerability is found in CVE-2026-54717?

What is the impact of CVE-2026-54717 on the CMS?

How do I fix CVE-2026-54717?

Who reported CVE-2026-54717?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-54717?

What type of vulnerability is found in CVE-2026-54717?

What is the impact of CVE-2026-54717 on the CMS?

How do I fix CVE-2026-54717?

Who reported CVE-2026-54717?