Vulnerability Database · Packagist · silverstripe/framework · Version
silverstripe/framework 5.3.19
5.3.19 is affected by 3 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 0 Medium 3 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
silverstripe/framework 5.3.19 vulnerabilities
3 vulnerabilities cover silverstripe/framework 5.3.19. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2026-54720: Silverstripe Framework XSS Vulnerability in Media Embed Functionality | 5.4 medium | 6.2.2 | 27 Aug 2026 |
| CVE-2025-30148: Silverstripe Framework XSS Vulnerability in HTML Editor | 5.4 medium | 5.3.23 | 10 Apr 2025 |
| User Enumeration Vulnerability in Silverstripe Framework: Timing Attack on Login and Password Reset Forms | 5.3 medium | 5.3.23 | 10 Apr 2025 |
Looking for another version, or everything Vulert holds for silverstripe/framework?
Questions
About silverstripe/framework 5.3.19
Is silverstripe/framework 5.3.19 vulnerable?
Yes. 3 vulnerabilities in the Vulert database cover silverstripe/framework 5.3.19: 0 critical, 0 high, 3 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor silverstripe/framework for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the silverstripe/framework version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.