CVE-2020-9311

5.4 mediumEPSS 0.6%

Medium (5.4) in silverstripe silverstripe. EPSS 0.6% chance of exploitation in the next 30 days.

In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-07-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

silverstripe:silverstripe

References

https://www.silverstripe.org/download/security-releases/CVE-2020-9311
https://www.silverstripe.org/download/security-releases/CVE-2020-9311

Check your stack JSON