{"vulnerability": "cve-2026-54720", "sightings": [{"uuid": "13f79dd0-f97f-463d-90cf-057dc88681a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33b5zs52o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54720 \u0432 Silverstripe Framework: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A94EF7B5-FD74-4DF4-B78E-2838C91AD492", "creation_timestamp": "2026-07-02T12:50:58.790229Z"}, {"uuid": "47af2f6e-c775-42d1-9416-846a38f27aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54720", "type": "seen", "source": "https://gist.github.com/alon710/6538c11be757e60d0a7d8025d09bf775", "content": "# CVE-2026-54720: CVE-2026-54720: Stored Cross-Site Scripting (XSS) via Sandbox Bypass in Silverstripe Framework\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54720\n\n## Summary\nCVE-2026-54720 is a stored Cross-Site Scripting (XSS) vulnerability inside the Silverstripe Framework's media shortcode processor. Due to a flawed performance optimization, HTML inputs containing two or fewer opening angle brackets bypassed security sandboxing. This flaw allows authenticated or lower-privileged users to inject administrative panel payloads that execute arbitrary client-side JavaScript when viewed by system administrators.\n\n## TL;DR\nA design shortcut in Silverstripe Framework's iframe sandboxing allows attackers to bypass security filters using simple single-tag iframe embeds, enabling unauthenticated or lower-privileged administrative session takeover.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.4\n- **EPSS Score**: 0.00263 (Percentile: 17.73%)\n- **Impact**: Stored XSS leading to Administrative Session Compromise\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Silverstripe Content Management System (CMS) deployments utilising the silverstripe/framework composer package.\n- **silverstripe-framework**: < 6.2.2 (Fixed in: `6.2.2`)\n\n## Mitigation\n\n- Upgrade the silverstripe/framework composer dependency to version 6.2.2 or above.\n- Deploy WAF rules to intercept raw iframe submissions containing event handlers or non-standard URI schemes.\n- Implement a robust Content Security Policy (CSP) prohibiting unsanitized inline scripts ('unsafe-inline') and restricting frame origins.\n\n**Remediation Steps:**\n1. Navigate to the project root directory.\n2. Run the composer command: composer update silverstripe/framework to pull down the patch.\n3. Clear the framework cache configuration to ensure the updated EmbedShortcodeProvider is initialized.\n4. Verify the application templates and media embed functions in a staging environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-gvrw-qqp5-jgc5](https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-gvrw-qqp5-jgc5)\n- [Silverstripe Official Security Advisory](https://www.silverstripe.org/download/security-releases/cve-2026-54720)\n- [Official Patch Commit](https://github.com/silverstripe/silverstripe-framework/commit/1bcb02adfc365c6436dc26ab2f6dd32d97f3979b)\n- [Official GitHub Pull Request](https://github.com/silverstripe/silverstripe-framework/pull/11993)\n- [Silverstripe Framework 6.2.2 Release Tag](https://github.com/silverstripe/silverstripe-framework/releases/tag/6.2.2)\n- [CVE-2026-54720 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-54720)\n- [NVD Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54720)\n- [CVE V5 Record Repository](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54720.json)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54720) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T02:33:08.006734Z"}]}