CyberRota Analysis
AI-GeneratedSilverstripe CMS versions prior to 6.2.1 are susceptible to cross-site scripting (XSS) vulnerabilities in the page breadcrumbs feature, as page titles are rendered without proper escaping in the page list view. This flaw could allow attackers to inject malicious scripts, potentially compromising user data or session integrity. Organizations using affected versions of Silverstripe CMS should prioritize upgrading to version 6.2.1 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.