CVE-2026-54717

{
  "id": "CVE-2026-54717",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-06T22:17:44.543",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1."
    },
    {
      "lang": "es",
      "value": "Silverstripe CMS es un sistema de gestión de contenidos de código abierto. Anteriormente a la 6.2.1, las migas de pan de las páginas en el CMS son vulnerables a cross-site scripting cuando se visualizan utilizando la vista de lista de páginas, porque los títulos de las páginas se renderizan en el rastro de migas de pan sin ser escapados. Este problema se ha solucionado en la 6.2.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "silverstripe",
          "product": "silverstripe-cms",
          "versions": [
            {
              "version": "< 6.2.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-07T14:32:51.176180Z",
          "id": "CVE-2026-54717",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/silverstripe/silverstripe-cms/commit/62f9912baa18c80304f3fa8b6eca71bb5dc2d21e",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/silverstripe/silverstripe-cms/pull/3175",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/silverstripe/silverstripe-cms/releases/tag/6.2.1",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/silverstripe/silverstripe-cms/security/advisories/GHSA-w3cp-g2pf-65wh",
      "source": "[email protected]"
    }
  ]
}