Vulnerability Database · Packagist · silverstripe/cms · Version
silverstripe/cms 4.13.8
4.13.8 is affected by 5 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 2 Medium 3 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
silverstripe/cms 4.13.8 vulnerabilities
5 vulnerabilities cover silverstripe/cms 4.13.8. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2020-9309: Silverstripe CMS malicious file upload enables script execution | 8.8 high | No fix published | 24 May 2022 |
| CVE-2020-6164: Silverstripe CMS Information Disclosure | 7.5 high | No fix published | 24 May 2022 |
| CVE-2026-54717: Silverstripe CMS XSS Vulnerability in Page Breadcrumbs | 5.4 medium | 6.2.1 | 06 Aug 2026 |
| CVE-2020-9311: Silverstripe CMS XSS Vulnerability | 5.4 medium | No fix published | 24 May 2022 |
| CVE-2015-5062: Silverstripe CMS Open Redirect | N/A medium | No fix published | 14 May 2022 |
Looking for another version, or everything Vulert holds for silverstripe/cms?
Questions
About silverstripe/cms 4.13.8
Is silverstripe/cms 4.13.8 vulnerable?
Yes. 5 vulnerabilities in the Vulert database cover silverstripe/cms 4.13.8: 0 critical, 2 high, 3 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor silverstripe/cms for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the silverstripe/cms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.