CVE-2026-55779

MEDIUM 5.4

Silverstripe Versioned: XSS in archive admin restore

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CAST_HTML and inserts $restoredItem->Title, $restoredItem->URLSegment, $restoredItem->CMSEditLink(), and $changedProperty['value'] without applying Convert::raw2xml(). When an administrator restores an archived page containing a crafted title or URL segment, the generated restoration message can execute stored JavaScript in the administrator's browser, compromising the confidentiality and integrity of the CMS session. This issue is fixed in version 3.2.1.

CWE	CWE-79
Vendor	silverstripe
Product	silverstripe-versioned
Published	Aug 28, 2026

Stay Ahead of the Next One

Get instant alerts for silverstripe silverstripe-versioned

Be the first to know when new medium vulnerabilities affecting silverstripe silverstripe-versioned are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

silverstripe / silverstripe-versioned

< 3.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/silverstripe/silverstripe-versioned/security/advisories/GHSA-m4g4-86qc-v8w7 github.com: https://github.com/silverstripe/silverstripe-versioned/pull/541 github.com: https://github.com/silverstripe/silverstripe-versioned/commit/6e30a2cf8d4b9233690464da61bd0fc4d3e92952 github.com: https://github.com/silverstripe/silverstripe-versioned/releases/tag/3.2.1 silverstripe.org: https://www.silverstripe.org/download/security-releases/cve-2026-55779