https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 30 Aug 2026 09:36:49 +0000 https://vulnerability.circl.lu/sighting/4bbc47bc-8ee4-438b-bcbe-396b709917b2/export {"uuid": "4bbc47bc-8ee4-438b-bcbe-396b709917b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55779", "type": "seen", "source": "https://gist.github.com/alon710/9e3bb6e078cacafc1d284d829bce0078", "content": "# CVE-2026-55779: CVE-2026-55779: Stored Cross-Site Scripting (XSS) in Silverstripe Archive Admin Restore\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55779\n\n## Summary\nA Stored Cross-Site Scripting (XSS) vulnerability exists in the silverstripe/versioned package prior to version 3.2.1. When an administrator restores an archived page containing a crafted Title or URLSegment, the generated restoration message is rendered as CAST_HTML without proper sanitization. This allows malicious JavaScript to execute in the administrator's browser session, compromising the confidentiality and integrity of the CMS dashboard.\n\n## TL;DR\nUnescaped user input in the RestoreAction helper leads to stored XSS inside the Silverstripe CMS administrative interface during page restoration actions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.4 (Medium)\n- **EPSS Score**: Not Available\n- **Impact**: Stored Cross-Site Scripting / Session Hijacking\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS\n- Silverstripe Versioned Module\n- **silverstripe/versioned**: < 3.2.1 (Fixed in: `3.2.1`)\n\n## Mitigation\n\n- Upgrade silverstripe/versioned dependency to 3.2.1 or higher.\n- Perform manual XML escaping via Convert::raw2xml inside RestoreAction.php as a hotfix.\n- Audit versioned database tables for HTML tags and attribute payloads.\n\n**Remediation Steps:**\n1. Run 'composer update silverstripe/versioned' to pull the patched version.\n2. Verify in composer.lock that the installed version is 3.2.1 or higher.\n3. Execute detection SQL queries on SiteTree_Versions table to identify persistent payloads.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/silverstripe/silverstripe-versioned/security/advisories/GHSA-m4g4-86qc-v8w7)\n- [Pull Request #541](https://github.com/silverstripe/silverstripe-versioned/pull/541)\n- [Fix Commit](https://github.com/silverstripe/silverstripe-versioned/commit/6e30a2cf8d4b9233690464da61bd0fc4d3e92952)\n- [Test Commit](https://github.com/silverstripe/silverstripe-versioned/commit/03c15b3cf71f3fafa330c5af533e7dd3652b5456)\n- [Release 3.2.1](https://github.com/silverstripe/silverstripe-versioned/releases/tag/3.2.1)\n- [Silverstripe Security Release](https://www.silverstripe.org/download/security-releases/cve-2026-55779)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55779) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T10:32:30.962209Z"} {"uuid": "4bbc47bc-8ee4-438b-bcbe-396b709917b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55779", "type": "seen", "source": "https://gist.github.com/alon710/9e3bb6e078cacafc1d284d829bce0078", "content": "# CVE-2026-55779: CVE-2026-55779: Stored Cross-Site Scripting (XSS) in Silverstripe Archive Admin Restore\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55779\n\n## Summary\nA Stored Cross-Site Scripting (XSS) vulnerability exists in the silverstripe/versioned package prior to version 3.2.1. When an administrator restores an archived page containing a crafted Title or URLSegment, the generated restoration message is rendered as CAST_HTML without proper sanitization. This allows malicious JavaScript to execute in the administrator's browser session, compromising the confidentiality and integrity of the CMS dashboard.\n\n## TL;DR\nUnescaped user input in the RestoreAction helper leads to stored XSS inside the Silverstripe CMS administrative interface during page restoration actions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.4 (Medium)\n- **EPSS Score**: Not Available\n- **Impact**: Stored Cross-Site Scripting / Session Hijacking\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS\n- Silverstripe Versioned Module\n- **silverstripe/versioned**: < 3.2.1 (Fixed in: `3.2.1`)\n\n## Mitigation\n\n- Upgrade silverstripe/versioned dependency to 3.2.1 or higher.\n- Perform manual XML escaping via Convert::raw2xml inside RestoreAction.php as a hotfix.\n- Audit versioned database tables for HTML tags and attribute payloads.\n\n**Remediation Steps:**\n1. Run 'composer update silverstripe/versioned' to pull the patched version.\n2. Verify in composer.lock that the installed version is 3.2.1 or higher.\n3. Execute detection SQL queries on SiteTree_Versions table to identify persistent payloads.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/silverstripe/silverstripe-versioned/security/advisories/GHSA-m4g4-86qc-v8w7)\n- [Pull Request #541](https://github.com/silverstripe/silverstripe-versioned/pull/541)\n- [Fix Commit](https://github.com/silverstripe/silverstripe-versioned/commit/6e30a2cf8d4b9233690464da61bd0fc4d3e92952)\n- [Test Commit](https://github.com/silverstripe/silverstripe-versioned/commit/03c15b3cf71f3fafa330c5af533e7dd3652b5456)\n- [Release 3.2.1](https://github.com/silverstripe/silverstripe-versioned/releases/tag/3.2.1)\n- [Silverstripe Security Release](https://www.silverstripe.org/download/security-releases/cve-2026-55779)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55779) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T10:32:30.962209Z"} https://vulnerability.circl.lu/sighting/4bbc47bc-8ee4-438b-bcbe-396b709917b2/export Sat, 29 Aug 2026 10:32:30 +0000