Is CVE-2026-54717 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-54717?

CVE-2026-54717 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-54717

Description

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.