CVE-2026-54720 — 脆弱性インテリジェンス

—

公表日: 2026-07-01T21:17:03.417

CVSS

5.4

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. This issue was fixed in version 6.2.2/

情報源

• CVE-2026-54720
• Original advisory
• Original advisory